Cyber Incident Reporting & Safeguarding (NIST SP 800-171)

The contract requires the implementation of NIST SP 800-171 safeguarding controls to protect unclassified controlled technical information within the defense supply chain, ensuring compliance with federal cybersecurity standards for handling sensitive but unclassified data. This includes establishing and maintaining technical, administrative, and physical security measures to prevent unauthorized access, disclosure, or modification of the information, as well as formalizing procedures for timely cyber incident reporting in accordance with federal mandates. The work is scoped as a subcontract under the Department of Defense, with performance expected at New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation, identified under NAICS code 541512 for computer systems design services, was posted on July 23, 2026, and requires responses by August 3, 2026. The contract falls under the LAND SUPPLY CHAIN organizational umbrella and is part of broader efforts to enhance cybersecurity resilience across defense contractors. While no specific set-aside designation or point of contact is provided, the focus is squarely on meeting NIST 800-171 requirements, which demand documented policies, personnel training, access controls, media protection, audit capabilities, and incident response processes. Contractors must demonstrate proven experience in implementing these controls and a readiness to report cyber incidents promptly and accurately to the appropriate government authorities.