NIST SP 800-171 Cybersecurity Compliance Implementation

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 Rev 1 security controls to safeguard Covered Defense Information, ensuring compliance with federal cybersecurity standards for protected unclassified information. A comprehensive System Security Plan must be developed to document the organization’s approach to meeting these requirements, covering all applicable controls across people, processes, and technology. The contractor is also responsible for preparing for and successfully passing a Supplier Performance Risk System assessment to validate compliance and readiness. This subcontract is associated with the Department of Defense through the ASC SUPPLIER OPER OEM DIVISION and specifically pertains to performance at the location in New Cumberland, Pennsylvania, with the ZIP code 17070-5002. The work falls under NAICS code 541512, indicating it involves computer systems design and related services. The solicitation was posted on May 12, 2026, with responses due by May 20, 2026, and the contract is structured as a subcontract under the broader defense acquisition framework. All compliance activities must align with DoD expectations for securing CDI throughout the system lifecycle.