Cybersecurity and Covered Defense Information Safeguarding

This contract requires the implementation of NIST SP 800-171 controls to protect covered defense information handled by the subcontractor, in strict compliance with DFARS 252.204-7012. The subcontractor is obligated to establish and maintain a secure environment that ensures the confidentiality, integrity, and availability of sensitive unclassified information related to defense programs, including the application of all required security controls outlined in the NIST framework. Compliance is non-negotiable and must be verified through documented practices, continuous monitoring, and timely reporting of any cyber incidents affecting covered defense information. The subcontract is tied to a performance location in Norfolk, Virginia, and falls under the NAICS code 541512 for computer systems design services. It is issued under the Department of Defense and administered by CONSTRUCTION & EQUIPMENT CONTAINERS, with a response deadline of July 31, 2026. The subcontractor must be prepared to demonstrate adherence to federal cybersecurity standards and maintain records sufficient to prove compliance with all safeguarding requirements. Failure to meet these obligations may result in contract termination, penalties, or loss of eligibility for future DoD work.