Cybersecurity Compliance and Reporting Services

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information within the prime contractor’s systems and processes. The contractor must ensure full compliance with all applicable requirements outlined in DFARS 252.204-7012, including robust safeguarding measures to prevent unauthorized access, disclosure, or loss of sensitive data. A critical obligation is the timely reporting of any cyber incident affecting covered defense information, with strict adherence to the 72-hour reporting window to the designated government authority. The scope of work is focused on establishing a secure environment aligned with federal cybersecurity standards and sustaining that posture through continuous monitoring, assessment, and remediation. All activities are to be performed at the specified place of performance in New Cumberland, Pennsylvania, with an emphasis on meeting the Department of Defense’s cybersecurity expectations. The subcontract is tied to Solicitation SPE4A6626T07EE, with responses due by July 24, 2026, and falls under NAICS code 541512 for computer systems design services.