Cybersecurity & Data Compliance Support

The contract requires comprehensive support to ensure compliance with NIST SP 800-171 standards, focusing on the protection of Controlled Unclassified Information across all DoD contractor systems. This includes implementing and maintaining appropriate security controls, conducting ongoing assessments, and ensuring that all systems handling CUI meet federal cybersecurity requirements. The contractor must establish and enforce policies and procedures to safeguard data at rest and in transit, integrate continuous monitoring, and train personnel on compliance obligations to prevent unauthorized access, disclosure, or loss of sensitive information. In addition to compliance, the contract mandates timely and accurate cyber incident reporting in accordance with DFARS clause 252.204-7012. All incidents involving the compromise or suspected compromise of CUI must be reported within 72 hours, with detailed documentation provided to the DoD. This work is performed under a Total Small Business Set-Aside, exclusively available to small businesses, and is classified under NAICS code 541512 for computer systems design services. Performance is required at Cannon AFB, New Mexico, and the solicitation response deadline is May 15, 2026, at 6:00 p.m. EST. The contract is structured as a subcontract under the Department of Defense, with the prime contractor identified as FA4855 27 Socons Lgc.