NIST SP 800-171 Compliance Implementation

The contract requires the implementation of NIST SP 800-171 security controls across all information systems that handle Controlled Unclassified Information, ensuring comprehensive protection through access controls, robust audit logging, system hardening, and data encryption. The technical scope demands full alignment with the NIST framework to safeguard CUI from unauthorized access, disclosure, or compromise, with particular emphasis on securing system configurations, managing user permissions, and maintaining verifiable audit trails. All proposed solutions must meet or exceed the baseline requirements outlined in the standard and be applied uniformly across the designated systems. This is a subcontract under the Department of Defense’s ASC Commodities Division, with performance centered at NEW CUMBERLAND, PA, zip 17070-5002. The solicitation was posted on May 10, 2026, and responses are due by May 18, 2026, with the NAICS code 541512 indicating it falls under Computer Systems Design Services. The contract is not subject to any set-aside provisions, and bidders must be prepared to demonstrate technical expertise in federal information security standards and the ability to execute a full-scale compliance rollout within a compressed timeline. All work must be conducted in accordance with DoD requirements and validated through documented evidence of control implementation.