Cybersecurity and Covered Defense Information Safeguarding

The contract requires implementation of NIST SP 800-171 security controls to protect controlled unclassified information within the contractor’s systems, ensuring alignment with federal cybersecurity standards for defense-related data. Compliance with DFARS 252.204-7012 is mandatory, which includes establishing procedures for detecting, reporting, and responding to cyber incidents affecting covered defense information, as well as preserving and providing forensic data upon request. The requirement applies to all subcontractors handling such information and demands a robust security posture across networks, devices, and personnel practices to prevent unauthorized access or data exfiltration. This subcontract falls under NAICS code 541512 for computer systems design services and is issued by the Defense Logistics Agency within the Department of Defense. The solicitation was posted on July 21, 2026, with responses due by August 3, 2026. The place of performance and point of contact details are not specified, indicating that performance may occur at the contractor’s facilities or other designated locations. All parties must ensure their information systems meet the outlined security requirements before access to controlled unclassified information is granted, and ongoing compliance will be subject to assessment and potential audit.