Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation and ongoing maintenance of cybersecurity controls to protect contractor information systems handling covered defense information, in full compliance with DFARS 252.204-7012 and the NIST SP 800-171 security requirements. This includes establishing robust access controls, encryption, audit logging, and system hardening measures to safeguard sensitive data, as well as ensuring timely reporting of any cybersecurity incidents to the appropriate government authorities. The contractor must also maintain and submit a current System for Award Management (SAM) Profile Security Rating (SPRS) score that reflects ongoing compliance with the stated standards. This is a subcontract under the Department of Defense, specifically managed by Mschq Norfolk, with a focus on securing information systems that process, store, or transmit defense-related data. The solicitation was posted on July 16, 2026, and responses are due by July 26, 2026. It falls under NAICS code 541512 for computer systems design services and mandates strict adherence to federal cybersecurity frameworks without deviation. All activities must be performed in alignment with the defense contracting standards, with no flexibility in meeting the mandatory compliance thresholds or reporting obligations.