Cybersecurity Compliance & Incident Reporting Support

This contract requires the implementation of NIST SP 800-171 controls to safeguard covered defense information within the contractor’s systems and processes, ensuring alignment with Department of Defense cybersecurity standards. The scope includes establishing, maintaining, and continuously validating the technical and procedural safeguards mandated by the framework, with a focus on protecting sensitive data transmitted, stored, or processed in support of defense activities. Compliance must be demonstrable and auditable, with documentation reflecting the full deployment of required controls across all applicable systems. Additionally, the contractor is responsible for managing cyber incident reporting through the Defense Counterintelligence and Security Agency’s Defense Crime Center interface, ensuring timely and accurate submission of incident data in accordance with DoD directives. All activities must occur at the designated place of performance in New Cumberland, Pennsylvania, with performance expectations tied to strict timelines and regulatory obligations. The subcontract is categorized under NAICS code 541512, reflecting its focus on computer systems design services, and is solicited by the Land Supply Chain under the Department of Defense, with responses due by August 10, 2026.