Cybersecurity Compliance and Incident Reporting Support

The contract seeks support for ensuring compliance with NIST SP 800-171 requirements, monitoring the protection of covered defense information, and delivering timely cyber incident response and reporting in alignment with DFARS 252.204-7012. The work involves continuous oversight of cybersecurity controls, identification and mitigation of potential threats, and accurate documentation and submission of incident reports to meet federal contractual obligations. The scope emphasizes proactive monitoring and rapid response capabilities to safeguard sensitive information within the defense supply chain. This is a total small business set-aside subcontract under NAICS code 541512, awarded by the Department of Defense’s Active Devices Division. The performance location is in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on August 5, 2026, and responses are due by August 20, 2026. The contract is intended to engage small businesses capable of delivering specialized cybersecurity services under strict federal compliance standards, ensuring defense information remains protected against evolving cyber threats through structured monitoring, incident handling, and regulatory reporting.