Cybersecurity & Covered Defense Information Safeguarding

The contract requires implementation of NIST SP 800-171 security controls to protect covered defense information and ensure compliance with Department of Defense cyber incident reporting requirements, including mandatory reporting of all incidents within 72 hours as stipulated by DFARS regulations. The scope centers on securing sensitive information handled in support of defense operations, with strict adherence to standardized cybersecurity practices outlined in the NIST framework. This subcontract is issued under NAICS code 541512, associated with computer systems design services, and is tied to performance at Joint Base Elmendorf-Richardson in Alaska, with a zip code of 99506-4400. The solicitation was posted on August 4, 2026, and responses are due by August 10, 2026. The contracting office operates under the Department of Defense through the Medical Supply Chain Pharm FSA, indicating the work supports defense-related medical logistics. Compliance with federal cybersecurity mandates is non-negotiable, and failure to meet the 72-hour incident reporting window could result in contractual penalties or loss of eligibility for future defense work.