Secure Information Systems Support (NIST SP 800-171)

The contract requires the implementation and maintenance of NIST SP 800-171 cybersecurity controls to safeguard covered defense information stored on or transmitted through contractor systems. This effort is critical to ensuring compliance with federal standards for protecting sensitive information within the defense supply chain, and the contractor must establish, monitor, and sustain controls spanning access, identification, audit, configuration management, incident response, and data encryption among other areas. The work must be performed at the designated location in New Cumberland, Pennsylvania, with a zip code of 17070-5002, and adherence to the specified security framework is mandatory for continued performance. This subcontract is classified under NAICS code 541512, indicating it relates to computer systems design and related services, and was posted on June 28, 2026, with a response deadline of July 9, 2026. The contracting activity falls under the Department of Defense through the Active Devices Division, and the work supports DoD information security requirements. All proposed solutions must demonstrate proven capability in deploying and managing NIST SP 800-171 controls in real-world environments, with an emphasis on continuous compliance, documentation, and readiness for assessment or audit. There is no set-aside designation listed, meaning the opportunity is open to all eligible contractors capable of meeting the technical and security obligations outlined.