Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation of NIST SP 800-171 security controls to protect covered defense information and ensure ongoing compliance with DFARS 252.204-7012, which mandates specific cybersecurity requirements for contractors handling sensitive defense data. The work involves establishing, maintaining, and auditing a security framework aligned with federal standards to safeguard information systems that process, store, or transmit covered defense information, with continuous monitoring and documentation to meet compliance obligations. This is a subcontract under the Department of Defense, administered by the Defense Logistics Agency, classified under NAICS code 541512 for computer systems design services. The contract was posted on July 16, 2026, and performance is tied to the broader defense supply chain, with no specific place of performance designated. The subcontractor must be prepared to demonstrate adherence to all regulatory requirements through formal assessments, incident reporting, and system hardening measures as specified in the defense acquisition regulations.