Cybersecurity and Covered Defense Information Safeguarding

This contract requires the implementation of NIST Special Publication 800-171 security controls to safeguard covered defense information on systems operated by the subcontractor, ensuring compliance with federal cybersecurity standards for defense-related data. The contractor must establish, maintain, and continuously monitor security measures aligned with the NIST framework, including access control, audit logging, configuration management, and incident response protocols, all tailored to protect sensitive information handled within the scope of the agreement. Additionally, the contractor is obligated to promptly report any cyber incidents affecting these systems in accordance with regulatory timelines and protocols to ensure timely mitigation and information sharing. The work is to be performed at Fort Campbell, with a response deadline of July 21, 2026, and falls under NAICS code 541512 for computer systems design services. This subcontract is issued by the Department of Defense through the Medical Supply Chain FSH office and is part of broader efforts to enforce cybersecurity resilience across the defense industrial base. The scope focuses exclusively on securing covered defense information, and adherence to all NIST 800-171 requirements is mandatory for contract performance and compliance. Failure to meet these obligations may result in contractual penalties or termination.