Cybersecurity and Information Safeguarding (NIST SP 800-171)

The contract requires implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls to protect covered defense information across all systems and environments. Compliance with DFARS 252.204-7012 is mandatory, mandating robust safeguarding measures and immediate reporting of any cyber incidents that affect covered defense information or systems. The contractor must conduct regular SPRS self-assessments to evaluate and document the maturity of implemented security controls, ensuring continuous alignment with federal requirements. All activities must be performed under the auspices of the Department of Defense, specifically the Active Devices Division, as a subcontract under NAICS code 541512 for cybersecurity services. The solicitation window is extremely tight, with responses due just three days after posting, requiring prompt action from interested parties to meet the deadline.