Covered Defense Information Safeguarding and Cybersecurity Compliance

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information and ensure full compliance with DFARS 252.204-7012, including the timely reporting of any cyber incidents that may affect the confidentiality, integrity, or availability of sensitive data. The work is focused on establishing a robust cybersecurity posture aligned with federal standards for contractors handling controlled unclassified information within the defense supply chain. All systems and processes must be configured to meet the rigorous requirements of NIST 800-171 and must sustain compliance through continuous monitoring, documentation, and incident response procedures. The contract is structured as a small business set-aside under the SBA’s Total Small Business Set-Aside program, with the NAICS code 541512 indicating it falls under Computer Systems Design Services. It is issued by the Department of Defense under the agency name CONSTRUCTION & EQUIPMENT MANU & CON, with performance required at a location in New Cumberland, Pennsylvania, ZIP 17070-5002. Response submissions are due by August 17, 2026, and the solicitation was posted on August 5, 2026. This subcontract opportunity is targeted exclusively at small businesses and demands demonstrated capability in cybersecurity compliance, incident reporting, and the protection of controlled defense information in accordance with federal regulatory frameworks.