Cybersecurity Compliance (DFARS 252.204-7012)

This contract requires the implementation and ongoing maintenance of cybersecurity safeguards to protect covered defense information, with strict adherence to the National Institute of Standards and Technology Special Publication 800-171 standards. The contractor must establish and sustain a comprehensive security posture that meets all NIST SP 800-171 requirements, including access control, awareness and training, audit and accountability, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, physical protection, risk assessment, system and communications protection, and system and information integrity. Additionally, the contractor is obligated to promptly report any cyber incidents affecting covered defense information in accordance with DFARS 252.204-7012, ensuring timely notification and cooperation with government authorities during investigations and remediation efforts. The contract is structured as a subcontract under a Total Small Business Set-Aside, meaning only small businesses as defined by the Small Business Administration are eligible to respond. It falls under the NAICS code 541512, which pertains to computer systems design and related services, indicating that the work involves technical planning, design, and implementation of secure information systems. The solicitation was posted on August 3, 2026, with a response deadline of August 18, 2026, and is managed by the Strategic Acquisition Program Directorate within the Department of Defense. The performance location has not been specified, and the contract is accessible via the DIBBS platform for interested small businesses to review and submit proposals.