Cybersecurity and Controlled Information Safeguarding

The contract requires the implementation of NIST SP 800-171 controls to protect covered defense information and ensure full compliance with DFARS 252.204-7012, encompassing all aspects of cybersecurity measures, cyber incident reporting, and system assessments. The subcontractor must establish, maintain, and verify the effectiveness of security controls aligned with NIST guidelines to safeguard controlled technical information and respond promptly to any security breaches or incidents in accordance with federal requirements. All activities must be conducted to meet the stringent standards set by the Department of Defense for information security within subcontracted operations. Performance of this subcontract is localized to New Cumberland, Pennsylvania, with a submission deadline of July 28, 2026, and a posting date of July 20, 2026. The North American Industry Classification System code 541512 identifies the work as computer systems design and related services, indicating the technical nature of the cybersecurity implementation tasks. The contracting entity is the ASC Supplier Operations OEM Division under the Department of Defense, and the subcontractor is expected to demonstrate proven capability in handling sensitive government data and adhering to DoD cybersecurity mandates without the use of external certifications or set-asides.