Cyber Incident Reporting and Information System Safeguarding

The contract requires the implementation of NIST SP 800-171 controls to safeguard Controlled Unclassified Information and ensure full compliance with DFARS 252.204-7012 and FAR 52.204-93, focusing on the protection of CUI and the timely reporting of cyber incidents. This subcontract is designated under the SBA set-aside program and is tied to the NAICS code 541512, indicating it is for computer systems design services. The performance location and agency contact details are unspecified, but the contracting entity operates under the Department of Defense, specifically the Fluid Handling Division. All work must be completed in alignment with federal cybersecurity requirements, including establishing robust access controls, encryption, audit logging, and incident response protocols as mandated by the referenced regulations. Submission of proposals is due by July 20, 2026, with the solicitation publicly posted on July 5, 2026, through the DIBBS platform. The nature of the work demands a thorough understanding of CUI handling procedures, secure information system architecture, and the ability to document and report cybersecurity events in accordance with federal guidelines. Compliance is not optional and failure to meet these requirements could result in contract termination or financial penalties. The contractor must demonstrate proven experience in implementing NIST 800-171 controls and managing cyber incident reporting processes within a Department of Defense subcontract environment.