NIST SP 800-171 Cybersecurity Compliance Support

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls across all systems that process, store, or transmit Controlled Unclassified Information, ensuring full compliance with federal cybersecurity standards for non-federal organizations. The successful bidder must establish, document, and sustain the required security controls, conduct regular assessments to validate adherence, and submit timely updates to the Supplier Performance Risk System to demonstrate compliance status. Incident reporting procedures must be in place to promptly disclose any cybersecurity events involving CUI, aligning with federal guidelines for response and mitigation. The work will be performed at a designated location in New Cumberland, Pennsylvania, with a performance deadline that aligns with the contract’s operational timeline. The solicitation is classified as a subcontract under NAICS code 541512, indicating it relates to computer systems design services, and is being issued by the Department of Defense through its ASC Supplier Oper OEM Division. Responses must be submitted by May 20, 2026, and the contract is open to eligible subcontractors seeking to support U.S. government cybersecurity requirements without formal set-aside restrictions.