Cybersecurity Compliance and CDI Protection (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to safeguard Covered Defense Information (CDI) across all systems and environments involved in the program. Compliance must encompass all required security requirements outlined in the standard, including access control, audit logging, configuration management, incident response, and data protection measures. The contractor is obligated to undergo a SPRS assessment to validate their cybersecurity posture and must promptly report any cyber incidents involving CDI in accordance with DFARS 252.204-7012, including submission of detailed incident reports to the Department of Defense. This subcontract is issued under the NAICS code 541512 for computer systems design services and is tied to the Department of Defense, specifically under LSO Combat Vehicles and Armament, with performance required at the location in New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation was posted on July 16, 2026, and responses are due by July 27, 2026. While no set aside type is specified, the expectation is for qualified entities to demonstrate proven experience in NIST 800-171 implementation and DFARS compliance, particularly for defense-related environments handling sensitive unclassified information.