Cybersecurity Compliance (for Covered Defense Information)

The contract requires the implementation of comprehensive cybersecurity measures to protect Covered Defense Information (CDI) in accordance with DFARS 52.204-7012, ensuring all required safeguards are in place to prevent unauthorized access, disclosure, or compromise of sensitive data. This includes the development and ongoing maintenance of a System Security Plan that documents security controls, risk management practices, and compliance protocols tailored to the handling of CDI. The contractor must also establish procedures for timely incident reporting to the Department of Defense in the event of a cybersecurity breach or suspicious activity involving CDI, ensuring full transparency and alignment with federal defense standards. All work under this subcontract is to be performed at the specified location in New Cumberland, Pennsylvania, with a compliance deadline for responses set for August 15, 2026. The contract falls under NAICS code 541611, indicating it is related to computer systems design and related services, and is issued by the Active Devices Division within the Department of Defense. The subcontractor is expected to demonstrate proven capabilities in cybersecurity compliance, including familiarity with NIST SP 800-171 controls, and must retain the ability to audit and update security measures as regulatory requirements evolve. Failure to meet incident reporting timelines or maintain an up-to-date System Security Plan may result in contract noncompliance and potential penalties.