Cybersecurity & Covered Defense Information Safeguarding

This contract requires the implementation of NIST Special Publication 800-171 controls to ensure the protection of covered defense information within the contractor’s systems and environments. Compliance with these cybersecurity standards is mandatory to safeguard sensitive data transmitted, processed, or stored as part of the subcontracted work. The contractor must establish and maintain robust security controls aligned with the NIST framework, covering areas such as access control, audit and accountability, configuration management, and incident response. In addition to safeguarding information, the contractor is obligated to promptly report any cyber incidents that compromise or potentially compromise covered defense information, in accordance with federal reporting requirements. The contract is issued as a subcontract under the Department of Defense, specifically managed by the Active Devices Division, with a NAICS code of 541512 indicating it relates to computer systems design services. The solicitation was posted on July 21, 2026, and responses are due by August 3, 2026. Performance location details are unspecified, but the work is expected to support Department of Defense objectives through secure processing of protected information. The subcontractor must operate within the defined cybersecurity framework without deviation, ensuring continuous compliance and readiness for audit or inspection. Failure to meet these requirements may result in contract termination or other remedial actions.