NIST SP 800-171 Compliance & Cybersecurity Assessment

The contract requires full implementation, documentation, and assessment of cybersecurity controls in alignment with NIST SP 800-171 to safeguard Covered Defense Information as mandated by DFARS 252.204-7012. The work involves configuring systems to meet all 110 required security controls, maintaining comprehensive evidence of compliance, and undergoing a formal assessment to verify implementation effectiveness. All activities must ensure the protection of sensitive defense data processed, stored, or transmitted by the contractor. The contract is structured as a subcontract under the Department of Defense, specifically for performance at the New Cumberland facility with a ZIP code of 17070-5002. It falls under the NAICS code 541512 for computer systems design services and was posted on July 20, 2026, with a response deadline of July 31, 2026. Compliance with federal cybersecurity requirements is non-negotiable, and failure to meet NIST SP 800-171 standards could result in contract termination or loss of eligibility for future DoD work.