Cybersecurity and Covered Defense Information Safeguarding

The contract requires the implementation of NIST SP 800-171 controls to protect Controlled Unclassified Information across all systems engaged in manufacturing and logistics operations, ensuring compliance with Department of Defense cybersecurity standards. This includes the development and ongoing maintenance of a System Security Plan and a Plan of Action and Milestones, to document security posture, identify vulnerabilities, and track remediation efforts in a structured and auditable manner. The work is focused on securing CUI throughout the lifecycle of sensitive data as it moves through production and supply chain environments. The subcontract is issued by the ACTIVE DEVICES DIVISION under the Department of Defense, with performance required at Hill Air Force Base, Utah, 84056-5734. It falls under NAICS code 541512 for Computer Systems Design Services, indicating a technical, design-driven cybersecurity implementation effort. The solicitation was posted on July 9, 2026, with responses due by July 20, 2026, and is accessible through the DIBBS platform. While no set-aside designation or point of contact is specified, the emphasis on NIST controls and documentation underscores the need for rigorous compliance and operational discipline from the subcontractor to meet defense contracting requirements.