Cybersecurity and Covered Defense Information Safeguarding

The contract requires the implementation of NIST SP 800-171 security controls to protect covered defense information and ensure full compliance with the Defense Federal Acquisition Regulation Supplement clauses DFARS 252.204-7012 and 52.240-93. This subcontract is part of a broader effort by the Department of Defense’s Active Devices Division to enforce robust cybersecurity standards across its supply chain, mandating that all systems handling covered defense information meet stringent federal requirements for access control, audit, configuration management, incident response, and data encryption. The performance location is designated as Jacksonville, Florida, with a ZIP code of 32212-0103, indicating the physical or operational site where the cybersecurity measures must be executed and maintained. The solicitation was posted on July 9, 2026, with a firm response deadline of July 20, 2026, leaving a narrow window for qualified parties to submit proposals. The NAICS code 541512 corresponds to computer systems design and related services, signaling that the work involves technical implementation rather than general contracting or manufacturing. This subcontract does not specify any set-aside status, meaning it is open to all eligible entities regardless of size or ownership classification. Compliance with all referenced regulations is mandatory, and failure to meet the required controls could result in contract termination or loss of future DoD business opportunities.