NIST SP 800-171 Cybersecurity Compliance Assessment and Implementation

The contract requires comprehensive cybersecurity services to achieve NIST SP 800-171 compliance for systems handling Controlled Unclassified Information, including a thorough gap assessment to identify deficiencies against required security controls, followed by the implementation of necessary controls to close those gaps. A complete System Security Plan must be developed to document the organization’s security posture, policies, and procedures aligned with NIST guidelines, and a detailed remediation roadmap must be provided to guide ongoing compliance efforts and prioritize actions for continuous improvement. All work is to be performed at the specified location in New Cumberland, Pennsylvania, under a subcontract arrangement with the Department of Defense’s Active Devices Division, and responses must be submitted by the deadline of July 20, 2026, with the solicitation issued under NAICS code 541612 for computer systems design services.