Cybersecurity Compliance and Data Safeguarding for IT-Connected Systems

The contract requires full compliance with NIST SP 800-171 to protect Covered Defense Information across all IT-connected systems managed under the OCMM framework. This includes implementing robust security controls for data safeguarding, ensuring timely cyber incident reporting in accordance with federal requirements, and maintaining proper media preservation protocols to retain evidence and forensic data as needed. All systems must be configured and monitored to meet the stringent cybersecurity standards outlined by NIST, with particular emphasis on preventing unauthorized access, disclosure, or modification of sensitive defense information. The work is part of a subcontract under the Department of Defense and is performance-based at a location in Columbus with a postal code of 43213. The solicitation was posted on May 12, 2026, and responses are due by May 26, 2026. The North American Industry Classification System code is 541611, indicating the work falls under management consulting services related to administrative and general management. The contract demands strict adherence to federal cybersecurity mandates and requires ongoing operational diligence to maintain compliance, report incidents, and preserve digital media without alteration or loss.