Cybersecurity and Data Safeguarding for Covered Defense Information

This contract requires the implementation of NIST SP 800-171 security controls to protect Covered Defense Information (CDI) handled during performance, in alignment with DFARS 252.204-7012 requirements. The contractor must establish and maintain a secure Information System that meets all specified confidentiality, integrity, and availability safeguards outlined in the NIST framework, including access controls, audit logging, media protection, and incident response procedures. Any cyber incident involving CDI must be reported promptly to the Department of Defense as mandated by the regulation, ensuring timely detection, response, and remediation to mitigate potential threats. The contract is classified as a subcontract under the NAICS code 541512, associated with Computer Systems Design Services, and is managed by the Electrical Devices Division of the Department of Defense. Performance is expected to occur in New Cumberland, Pennsylvania, with a response deadline of July 27, 2026. Compliance with these cybersecurity requirements is mandatory for contract award and ongoing performance, and failure to adhere to the controls or reporting obligations may result in contractual penalties or termination. The work involves handling sensitive defense-related data and demands strict adherence to federal cybersecurity standards to ensure the protection of national security information.