Cybersecurity Compliance and Information Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls to protect covered defense information associated with the design and production of a lever assembly. This includes ensuring all systems, processes, and personnel handling such information comply fully with the specified security requirements to prevent unauthorized access, disclosure, or compromise. The contractor must establish and sustain a robust cybersecurity posture aligned with federal standards, covering access controls, audit logging, system and communications protection, and incident response capabilities. Additionally, the contractor is obligated to promptly report any cyber incidents affecting the covered defense information to the appropriate government authorities in accordance with regulatory mandates. The work is to be performed at the designated place of performance in New Cumberland, Pennsylvania, under a subcontract arrangement through the Department of Defense. The solicitation, issued under NAICS code 541512 for computer systems design services, was posted on August 9, 2026, with responses due by August 20, 2026. Compliance with these requirements is critical to maintaining the integrity and confidentiality of defense-related data throughout the lever assembly’s development lifecycle.