NIST SP 800-171 Compliance and Cybersecurity Assessment

The contract requires the implementation and assessment of NIST Special Publication 800-171 cybersecurity controls to safeguard Controlled Unclassified Information in accordance with Defense Federal Acquisition Regulation Supplement requirements. The work focuses on ensuring compliance with the full suite of NIST 800-171 security controls across all applicable systems and processes, with a formal evaluation to verify proper configuration, documentation, and operational effectiveness. The assessment must validate that the contractor has established the necessary administrative, technical, and physical safeguards to protect CUI throughout its lifecycle. This is a subcontract under the Department of Defense, specifically managed by the Active Devices Division, with performance required at New Cumberland, PA, ZIP 17070-5002. The work falls under NAICS code 541512, indicating it involves computer systems design and related services. The solicitation was posted on July 14, 2026, and responses are due by July 27, 2026. All parties must align their cybersecurity posture with federal standards to support DoD supply chain integrity, and noncompliance will render performance unacceptable. The contract emphasizes accountability for continuous monitoring and documentation of security practices to meet ongoing audit and compliance obligations.