Cybersecurity & Covered Defense Information Safeguarding

The contract requires the implementation of NIST SP 800-171 security controls to safeguard covered defense information on systems within the scope of performance at Hill AFB, Utah, with the ultimate goal of achieving CMMC Level 2 certification. This involves establishing, maintaining, and continuously monitoring a compliant cybersecurity framework that meets federal standards for protecting sensitive military data. The contractor must also manage cyber incident reporting procedures in accordance with required protocols, ensuring timely detection, response, and notification of any security breaches or anomalies affecting the system environment. This is a Service-Disabled Veteran-Owned Small Business Set-Aside subcontract under NAICS code 541512, issued by the Department of Defense through LAND SUPPLIER OPNS VEHICLE SPT, with a response deadline of August 7, 2026. Performance is exclusively tied to the Hill AFB location, and full compliance with all cybersecurity requirements is mandatory to fulfill contractual obligations. The subcontractor must demonstrate both technical capability and procedural discipline to satisfy the stringent controls outlined in NIST SP 800-171 and the Cybersecurity Maturity Model Certification framework.