Cybersecurity Compliance and Covered Defense Information Safeguarding

The contract requires implementation of NIST SP 800-171 security controls to safeguard covered defense information and ensure full compliance with DFARS 252.204-7012, including the timely reporting of any cyber incidents that may impact protected data. This subcontract focuses on establishing robust cybersecurity practices aligned with federal standards to protect sensitive defense information throughout its lifecycle, emphasizing accountability, access control, audit logging, and incident response. All activities must be performed at the designated place of performance in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation, issued under NAICS code 541512 for computer systems design services, is managed by the Department of Defense through the DDSP New Cumberland Facility and is open for response until July 27, 2026. While no set-aside designation is specified, contractors must demonstrate the capability to meet stringent cybersecurity requirements, maintain compliance documentation, and respond to potential incidents without delay. The contract is part of a broader effort to secure defense supply chain information and enforce national cybersecurity standards across subcontracted work.