Cybersecurity Compliance and Incident Reporting Services

The contract seeks specialized services to implement and maintain cybersecurity controls in full alignment with DFARS 252.204-7012 and NIST SP 800-171 standards, ensuring the protection of controlled unclassified information within Department of Defense systems. The contractor will be responsible for the ongoing operational support of these controls, including continuous monitoring, assessment, and refinement to meet evolving regulatory requirements. A critical component of the scope is the capability to detect cybersecurity incidents and report them to the DoD CIO within a strict 72-hour window, emphasizing timely response and transparency in security events. This is a subcontract under a total small business set-aside, restricted to businesses certified as small by the SBA, with the NAICS code 541512 indicating it focuses on computer systems design services. Performance is required at the facility located in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on July 23, 2026, and responses are due by July 31, 2026, providing a limited window for qualified small businesses to submit proposals. The contracting activity is managed by the Electrical Devices Division under the Department of Defense, underscoring the mission-critical nature of the cybersecurity functions being procured.