Cybersecurity and Covered Defense Information Safeguarding

The contract requires implementation of NIST SP 800-171 controls to safeguard covered defense information in accordance with DFARS requirements, ensuring that all necessary cybersecurity measures are in place to protect sensitive data handled under the agreement. The contractor must conduct regular self-assessments to evaluate compliance with these controls and report any cyber incidents through the Supplier Performance Risk System, maintaining full transparency and accountability throughout the contract lifecycle. This obligation applies to all aspects of performance involving covered defense information and demands a robust, documented cybersecurity posture aligned with federal standards. The contracting vehicle is a subcontract classified as a Total Small Business Set-Aside under FAR 19.5, reserved exclusively for small businesses certified by the SBA. It falls under NAICS code 541512, indicating the primary services involve computer systems design and related activities. The contract is managed by the Strategic Acquisition Program Directorate within the Department of Defense and is open for response until August 20, 2026, with a posting date of August 5, 2026. Performance location details are unspecified, and the point of contact is not listed, though the full solicitation can be accessed via the provided DIBBS link for further procedural and submission guidance.