Cyber Incident Reporting and Data Protection

The contract requires implementation of procedures to detect, report, and protect cyber incident data in full compliance with DFARS 252.204-7009, ensuring that any cybersecurity incidents involving covered defense information are promptly identified and reported to the Department of Defense. It also mandates robust safeguards for third-party information reported in connection with these incidents, requiring strict handling, storage, and access controls to prevent unauthorized disclosure or exploitation. All activities must align with the cybersecurity requirements set forth for contractors handling sensitive government data. This is a subcontract under the NAICS code 541612, issued by the Department of Defense through the LAND SUPPLY CHAIN ESOC BUYS office. The place of performance is designated as Chambersburg, Pennsylvania, with a zip code of 17201-4150. The solicitation was posted on May 8, 2026, and responses are due by May 13, 2026, with the opportunity available through the DIBBS platform. No set-aside type is specified, and the contract is open to qualified subcontractors capable of meeting the stringent cybersecurity compliance and data protection obligations.