Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation of NIST SP 800-171 security controls to protect covered defense information on information systems, ensuring compliance with federal cybersecurity standards for contractors handling sensitive DoD data. This includes establishing technical, administrative, and physical safeguards to control access, detect anomalies, and secure data at rest and in transit, while also establishing clear procedures for timely reporting of cyber incidents in accordance with applicable regulations. The subcontract is issued under the NAICS code 541512 for computer systems design services and is tied to the Department of Defense through the Medical Supply Chain FSH organization. Performance is expected to occur at a military postal address in FPO with ZIP code 96683, indicating operational support may be conducted in a deployed or overseas environment. Proposals must be submitted by August 3, 2026, with no set-aside classification specified, and the obligation stems from a broader defense contracting framework requiring strict adherence to cybersecurity protocols for all systems processing covered defense information.