NIST SP 800-171 Cybersecurity Compliance Support

The contract requires implementation and documentation of all NIST SP 800-171 security controls to safeguard Covered Defense Information, ensuring full alignment with federal cybersecurity standards for defense contractors. This includes establishing technical, administrative, and physical safeguards across systems and processes that handle CDI, as well as maintaining comprehensive records to demonstrate compliance. A mandatory self-assessment of the implemented controls must be conducted and the results submitted to the Supplier Performance Risk System, with accurate and timely reporting critical to maintaining contract eligibility. Any cybersecurity incident affecting CDI must be reported to the appropriate authorities no later than 72 hours after detection, with procedures in place to detect, respond to, and document such events. The work is performed under a subcontract for the Department of Defense, with the primary place of performance located in New Cumberland, Pennsylvania, under the NAICS code 541512 for computer systems design services. Submission of proposals must occur by the deadline of August 5, 2026, following the solicitation issued on July 31, 2026.