Cybersecurity & Covered Defense Information Safeguarding

This contract requires the implementation of NIST SP 800-171 controls to safeguard covered defense information, ensuring alignment with the Defense Federal Acquisition Regulation Supplement clause DFARS 252.204-7012. The contractor must establish, maintain, and continuously validate security measures that protect sensitive information transmitted, stored, or processed in support of Department of Defense programs. Compliance includes conducting a self-assessment of security controls and submitting the results through the Supplier Performance Risk System, demonstrating adherence to federal cybersecurity standards for subcontractors handling defense data. The solicitation is classified as a subcontract under NAICS code 541512, indicating it pertains to computer systems design services. It is issued by the ASC SUPPLIER OPER OEM DIVISION within the Department of Defense and has a strict response deadline of July 31, 2026. Performance is expected to occur in support of defense operations, though specific locations are not defined. Failure to meet the NIST 800-171 requirements or to submit a compliant assessment report will result in non-compliance with contractual obligations and could jeopardize the subcontractor's eligibility for future work. All activities must be completed within the timeframe and under the conditions specified by the defense acquisition framework.