Cyber Incident Reporting and Third-Party Disclosure Compliance

This contract requires the implementation of procedures to report cyber incidents involving covered defense information in accordance with DFARS 252.204-7012, ensuring timely and accurate reporting to the Department of Defense. It also mandates the proper management and disclosure of incident information related to third parties as required by DFARS 252.204-7009, including coordination with subcontractors and vendors to ensure compliance across the supply chain. The work is focused on establishing robust incident response protocols, documenting actions taken, and maintaining records that meet federal cybersecurity standards for defense contractors. The contract is structured as a subcontract under the Department of Defense, specifically under the Land Supply Chain office, with performance tied to the location in Richmond, ZIP 40475-8343. It was posted on August 3, 2026, and responses are due by August 6, 2026, indicating a tight timeline for compliance planning and submission. The North American Industry Classification System code 541512 identifies the nature of the work as computer systems design and related services, emphasizing the technical and procedural expertise required to fulfill these cybersecurity obligations. Failure to meet these requirements may result in contractual noncompliance and potential penalties under federal acquisition regulations.