Cybersecurity Compliance for Contractor Information Systems

The contract requires implementation of NIST SP 800-171 security controls and compliance with cyber incident reporting requirements under DFARS 252.204-7012 to protect covered defense information on contractor information systems. This subcontract is focused on ensuring that all applicable cybersecurity measures are properly integrated and maintained to safeguard sensitive data handled by the contractor, with strict adherence to federal standards for information security in defense-related environments. The obligation extends to timely detection, reporting, and response to cyber incidents that may compromise the confidentiality, integrity, or availability of covered defense information. The contract is issued by the Department of Defense’s Active Devices Division under NAICS code 541512, with performance required at a location in New Cumberland, Pennsylvania, 17070-5002. The solicitation was posted on July 23, 2026, and responses must be submitted by August 3, 2026. While no set-aside designation is specified, the contract is structured as a subcontract, indicating it supports a broader prime contract or program within the defense acquisition system. Compliance with the specified cybersecurity framework is mandatory and non-negotiable, with failure to meet these requirements potentially resulting in contract termination or other contractual penalties.