Cybersecurity Compliance & Incident Reporting

The contract requires the implementation of National Institute of Standards and Technology Special Publication 800-171 controls to protect Covered Defense Information within contractor systems, in full compliance with Defense Federal Acquisition Regulation Supplement 252.204-7012. This includes establishing and maintaining a robust cybersecurity framework to safeguard sensitive data, ensuring all applicable technical and administrative safeguards are properly configured, monitored, and documented. The contractor must also establish procedures for promptly detecting, reporting, and responding to cyber incidents affecting CDI, in accordance with federal reporting timelines and requirements. This is a total small business set-aside under NAICS code 541512, administered by the Department of Defense’s Strategic Acquisition Program Directorate. The solicitation is open for responses until August 18, 2026, and is classified as a subcontract under the DIBBS platform. Performance is expected to occur without specified geographic restrictions, but the contractor must be prepared to meet all federal cybersecurity standards and incident response obligations regardless of location. All work must be completed by a qualified small business entity, and compliance with NIST SP 800-171 and DFARS 7012 is mandatory for award and continued performance.