Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation and documentation of NIST SP 800-171 security controls to safeguard covered defense information in alignment with DFARS 252.204-7012 requirements. This work is critical for ensuring compliance with federal cybersecurity standards applicable to defense contractors handling sensitive unclassified information and serves as foundational preparation for a CMMC assessment or self-attestation. All controls must be thoroughly documented to demonstrate implementation, operational effectiveness, and ongoing management of the cybersecurity posture. The task is scoped as a subcontract under the Department of Defense’s ASC Commodities Division, with performance expected to occur in New Cumberland, Pennsylvania, ZIP code 17070-5002. The solicitation falls under NAICS code 541512, indicating it targets computer systems design services, and the response deadline is August 6, 2026. While no set-aside type is specified, the contract emphasizes technical execution and documentation over procurement of products, requiring a contractor with proven experience in federal cybersecurity frameworks and the ability to deliver auditable evidence of compliance.