Cybersecurity & Covered Defense Information Safeguarding

This contract requires the implementation of NIST SP 800-171 controls to safeguard covered defense information within systems supporting Department of Defense operations, with strict compliance mandated to ensure the confidentiality, integrity, and availability of sensitive data. The contractor must establish and maintain a robust cybersecurity posture aligned with federal standards, including the prompt reporting of any cyber incidents affecting covered defense information as required by federal regulations. A designated System Security Officer must be appointed to oversee, manage, and enforce all cybersecurity protocols, ensuring accountability and continuous compliance throughout the contract period. All work is to be performed at Hill Air Force Base, Utah, with strict adherence to the place of performance location. The contract is a small business set-aside under the SBA's Total Small Business Set-Aside program, exclusively available to businesses certified as small under NAICS code 541512, which pertains to custom computer programming services. Responses are due by August 7, 2026, and the solicitation is issued by the ASC Commodities Division under the Department of Defense. The contracting vehicle is a subcontract, suggesting it will be awarded to a subcontractor supporting a larger prime contract or program. All activities must be conducted in full alignment with government cybersecurity mandates, and failure to meet the prescribed controls or reporting obligations may result in contract termination or penalties.