Cybersecurity and Covered Contractor Information System Safeguarding

This contract requires the implementation of all NIST Special Publication 800-171 security controls to safeguard covered defense information processed, stored, or transmitted on contractor information systems. The contractor must self-attest to compliance with these controls through the Supplier Performance Risk System and maintain ongoing adherence to the specified cybersecurity requirements. Additionally, the contractor is obligated to report any cyber incidents affecting covered defense information in accordance with DFARS clause 252.204-7012, ensuring timely notification and documentation of security breaches or compromised data. The work is scoped as a subcontract under the Department of Defense, specifically managed by the Fluid Handling Division, with performance expected at JBER, Alaska, 99506-2959. The solicitation is open for responses until August 17, 2026, and the NAICS code 541512 indicates this effort relates to computer systems design services, emphasizing the technical nature of the cybersecurity implementation tasks.