Cybersecurity and Covered Defense Information Safeguarding

This contract requires the implementation of NIST SP 800-171 controls and full compliance with DFARS 252.204-7012 to protect covered defense information on contractor systems and networks. The prime obligation centers on establishing and maintaining robust cybersecurity measures to safeguard sensitive data shared under Department of Defense contracts, ensuring all required security controls are properly documented, configured, and continuously monitored. The contractor must also be prepared to detect, report, and respond to cyber incidents involving covered defense information in accordance with federal reporting timelines and procedures. The work is to be performed at Robins Air Force Base, Georgia, under a subcontract as part of a larger defense program administered by the Fluid Handling Division within the Department of Defense. The solicitation was posted on July 27, 2026, with responses due by August 7, 2026. NAICS code 541512 applies, indicating the work involves computer systems design and related services. Compliance with these cybersecurity standards is mandatory, and failure to meet the requirements may result in contract termination, penalties, or loss of eligibility for future defense work. All systems handling covered defense information must be configured to meet the specified controls and capable of generating required documentation for audit and assessment.