Cybersecurity Compliance and Reporting

The contract requires the implementation of NIST SP 800-171 cybersecurity safeguards to protect covered defense information, with a focus on establishing a comprehensive System Security Plan that documents the controls and procedures in place to ensure compliance. Successful performance necessitates achieving an acceptable SPRS score, which reflects the contractor’s cybersecurity posture as evaluated through the Supplier Performance Risk System. Additionally, the contractor must establish and maintain robust processes for cyber incident reporting, ensuring timely and accurate notification of any security breaches or anomalies involving sensitive defense data. All activities must be conducted in alignment with Department of Defense standards and are performance-bound to the specified location in New Cumberland, Pennsylvania, under the oversight of the Fluid Handling Division. The subcontract is time-sensitive, with a response deadline just three days after the solicitation was posted, signaling urgency in securing a qualified party to meet critical compliance obligations.