Cybersecurity and Covered Defense Information Safeguarding

The contract requires the implementation and ongoing maintenance of cybersecurity controls in full alignment with NIST SP 800-171 to safeguard covered defense information processed, stored, or transmitted on contractor systems. These controls must be rigorously applied to ensure the confidentiality, integrity, and availability of sensitive data related to defense contracts, with continuous monitoring and documentation to demonstrate compliance. The contractor is obligated to establish a defense-in-depth security posture that includes access control, configuration management, incident response, and personnel security measures as specified under the standard. Additionally, the contractor must adheres strictly to DFARS requirements for reporting any cyber incidents affecting covered defense information or the supporting information systems. This includes immediate notification of potential breaches or unauthorized access, prompt containment and mitigation efforts, and the submission of detailed forensic reports as mandated. Performance is centered at New Cumberland, Pennsylvania, under the Department of Defense’s Fluid Handling Division, and the opportunity is structured as a subcontract with a response deadline of July 6, 2026, under NAICS code 541512 for computer systems design services.