Cybersecurity and Covered Defense Information Safeguarding

The contract requires the implementation of NIST SP 800-171 security controls to protect Covered Defense Information and ensure compliance with cyber incident reporting requirements under DFARS 252.204-7012. This subcontract is designated as a Total Small Business Set-Aside under the SBA rules, limiting eligibility to small businesses as defined by the North American Industry Classification System code 541512, which covers custom computer programming services. The primary objective is to establish and maintain a secure environment capable of safeguarding sensitive defense data against unauthorized access, disclosure, or compromise, with strict adherence to federal cybersecurity standards. The solicitation was posted on July 27, 2026, with responses due by August 11, 2026, and is managed by the Strategic Acquisition Program Directorate within the Department of Defense. Performance of the work is expected to occur at an unspecified location, with no specific place of performance detailed. Though no point of contact is listed, the solicitation can be accessed via the DIBBS portal. The contractor must be prepared to demonstrate full compliance with the NIST framework, maintain documentation of control implementation, and promptly report any cybersecurity incidents affecting covered information in accordance with DFARS requirements.