Cybersecurity and Covered Defense Information Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information, with full alignment to CMMC Level 2 requirements to ensure robust cybersecurity posture. Compliance must be demonstrated through documented practices, audits, and continuous monitoring to meet the Department of Defense’s standards for protecting sensitive information. All cyber incidents involving covered defense information must be reported promptly in accordance with DFARS 252.204-7012, including timely notification, forensic evidence preservation, and coordination with governing authorities. This is a women-owned small business set-aside subcontract under NAICS code 541512, with performance taking place at Robins Air Force Base, Georgia. The solicitation was posted on July 19, 2026, and responses are due by July 27, 2026. The contracting office is the ASC Supplier Oper AE and AF Division under the Department of Defense, and the successful offeror must demonstrate proven experience in federal cybersecurity compliance, particularly in supporting defense systems with classified or controlled unclassified information.