Cybersecurity and Controlled Technical Data Safeguarding

The contract requires the implementation of NIST SP 800-171 security controls and achievement of CMMC Level 2 compliance to protect covered defense information stored, processed, or transmitted by the contractor. This includes establishing robust cybersecurity measures across systems and networks to ensure the confidentiality, integrity, and availability of sensitive data, with a strict requirement to report any cyber incidents to the appropriate authorities within 72 hours of discovery. The contractor must demonstrate adherence to all applicable controls outlined in the NIST framework and maintain documentation to validate compliance during audits or assessments. This is a subcontract under the Department of Defense, specifically tied to LSO Combat Vehicles and Armament, with performance centered in New Cumberland, Pennsylvania, 17070-5002. The solicitation, posted on July 28, 2026, requires responses by August 10, 2026, and is classified under NAICS code 541512 for computer systems design services. The contractor must be prepared to meet stringent federal cybersecurity standards and operate within the DoD's supply chain security requirements, ensuring that all technical data and systems handling defense information are secured against current and emerging threats.