NIST SP 800-171 Compliance & Cybersecurity Assessment Support

The contract requires the implementation and assessment of NIST SP 800-171 security controls to safeguard Covered Defense Information and ensure compliance with Department of Defense cybersecurity requirements. This subcontract focuses on establishing, validating, and documenting the necessary technical and procedural safeguards to protect sensitive unclassified information within the contractor’s systems, aligning with federal mandates for handling CDI. The work must include a thorough review of existing security postures, identification of gaps relative to the 110 controls outlined in NIST SP 800-171, and the development of a plan to achieve full compliance through both technical and administrative measures. Assessment activities will involve evaluating the effectiveness of implemented controls, preparing documentation for DoD reporting purposes, and ensuring all findings are traceable and audit-ready. The performance location is designated as New Cumberland, PA with a zip code of 17070-5002, and the work is tied to a specific NAICS code of 541512, indicating a focus on computer systems design services. The solicitation is active with a response deadline set for July 23, 2026, and is being managed by the Active Devices Division under the Department of Defense, requiring proposers to demonstrate expertise in defense cybersecurity frameworks and proven experience in NIST 800-171 implementation and assessment.