Cybersecurity Compliance & Incident Reporting

The contract requires full implementation of NIST SP 800-171 cybersecurity controls to safeguard controlled unclassified information within the contractor’s systems, alongside the development of a comprehensive System Security Plan that documents how these controls are applied and maintained. The contractor must establish processes to ensure continuous compliance with these standards and be prepared to report any cyber incident affecting covered defense information within 72 hours, in strict accordance with DFARS 252.204-7012 requirements. This effort is critical for maintaining the integrity and security of sensitive government data handled under this subcontract. This subcontract is issued under the Department of Defense by the ASC Commodities Division, with the NAICS code 541512 indicating it pertains to computer systems design services. While no set-aside type or specific point of contact is provided, the solicitation remains open for responses until August 4, 2026, with a posting date of July 21, 2026. The place of performance has not been specified, and bidders must review the full solicitation through the provided DIBBS link to ensure alignment with all technical, administrative, and reporting obligations tied to this cybersecurity compliance effort.