Cybersecurity Compliance for Covered Defense Information

This contract requires the implementation and assessment of cybersecurity controls to protect Controlled Unclassified Information (CUI) on systems operated by a Service-Disabled Veteran-Owned Small Business, in full compliance with NIST SP 800-171 and DFARS regulatory standards. The work is focused on ensuring the confidentiality, integrity, and availability of covered defense information through the deployment of documented, tested, and continuously monitored security measures aligned with federal cybersecurity frameworks. The subcontractor must demonstrate proven expertise in executing NIST 800-171 controls and providing evidence of compliance through assessments, documentation, and remediation efforts. Performance is required at New Cumberland, Pennsylvania, with an established deadline for responses on July 6, 2026, and the solicitation is exclusively set aside for Service-Disabled Veteran-Owned Small Businesses under NAICS code 541512, which pertains to computer systems design services. The contract falls under the Department of Defense’s Land Supply Chain, underscoring its critical role in safeguarding sensitive defense-related data. Full compliance is non-negotiable, and the contractor must be prepared to undergo rigorous audits and provide continuous assurance that cybersecurity controls remain effective and current against evolving threats.