Cybersecurity Compliance and CDI Safeguarding

The contract requires implementation of NIST SP 800-171 controls to protect Covered Defense Information and ensure adherence to Federal Acquisition Regulation 52.204-7012, including all associated cyber incident reporting obligations. The work is scoped as a subcontract under the NAICS code 541512 and must be performed at the New Cumberland, Pennsylvania location with ZIP code 17070-5002. The obligation is tied to Department of Defense requirements and involves rigorous cybersecurity measures to secure sensitive information, with all activities governed by federal cybersecurity standards designed to mitigate risks to national defense data. The solicitation was posted on July 21, 2026, and responses are due by August 3, 2026, indicating a limited window for qualification and proposal submission. The contracting entity is the DDSP New Cumberland Facility, operating under the Department of Defense, and the subcontractor must be prepared to meet all technical, procedural, and reporting demands outlined in the regulation without deviation. Compliance is non-negotiable, and failure to implement required controls or respond appropriately to cyber incidents will constitute a breach of contractual obligations.