Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information in compliance with DFARS clauses 252.204-7012 and 7008. This subcontract is focused on ensuring robust cybersecurity practices are in place to safeguard sensitive data handled by the contractor, with all activities centered at Nellis AFB, Nevada, under the Department of Defense’s Medical Supply Chain Pharm FSA. The work involves assessing current systems, applying required technical and operational controls, and maintaining continuous compliance through documentation, monitoring, and periodic reviews to meet federal cybersecurity standards. The solicitation was posted on August 4, 2026, with a response deadline of August 10, 2026, and falls under NAICS code 541512 for computer systems design services. As a subcontract, it is part of a larger defense contracting effort, and the contractor must be prepared to demonstrate full adherence to NIST guidelines and DFARS requirements without exception. Failure to meet these cybersecurity obligations could result in contract termination or liability for data breaches involving covered defense information. All performance must occur at the specified location, and the contractor must have the capability to support and validate compliance with federal audit and reporting requirements throughout the contract term.