NIST SP 800-171 Compliance Implementation

This contract requires the implementation of basic safeguarding controls for contractor information systems to protect Controlled Unclassified Information in accordance with DFARS 52.240-93 and NIST SP 800-171 standards. The work is structured as a subcontract under the NAICS code 541512, associated with computer systems design services, and must be performed at the specified place of performance in New Cumberland, Pennsylvania, with a ZIP code of 17070-5002. The solicitation was posted on July 16, 2026, and responses are due by July 27, 2026, with the contracting agency identified as the Department of Defense under the organizational name LAND SUPPLIER OPNS ENGINES. Compliance with NIST SP 800-171 requires the contractor to establish and maintain a comprehensive set of security controls covering access control, audit, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, risk assessment, system and communications protection, and system and information integrity. All systems handling CUI must be secured according to these requirements to ensure the confidentiality, integrity, and availability of information, and the contractor must attest to fulfillment of these controls as part of the subcontractual obligation.