Cybersecurity and Covered Defense Information Safeguarding

The contract requires the implementation of NIST SP 800-171 controls to ensure the protection of covered defense information and full compliance with DFARS 252.204-7012, which mandates robust cybersecurity safeguards and timely reporting of cyber incidents. The contractor must establish and maintain system protections that meet federal standards for securing sensitive data transmitted, stored, or processed in support of Department of Defense operations. This includes configuring security controls for access management, audit logging, media protection, incident response, and continuous monitoring to prevent unauthorized access or data exfiltration. The subcontract is issued under the NAICS code 541512 for computer systems design services and is placed by the ASC Commodities Division within the Department of Defense. Performance is required to be conducted at the location in New Cumberland, Pennsylvania, with a ZIP code of 17070-5002. The solicitation was posted on July 20, 2026, and responses are due by July 28, 2026. All activities under this contract must align with the cybersecurity expectations of federal defense contracting, with a strong emphasis on accountability, documentation, and adherence to regulatory requirements governing the handling of controlled unclassified information.