Cybersecurity Compliance for Covered Defense Information

The contract requires implementation of NIST SP 800-171 security safeguards and ongoing maintenance of cyber incident reporting procedures specifically tailored for the protection of covered defense information. This subcontract is designated as a Total Small Business Set-Aside under SBA regulations, ensuring eligibility and participation are limited to small businesses as defined by the SBA size standards for NAICS code 541512, which corresponds to Computer Systems Design Services. The place of performance is located in New Cumberland with a zip code of 17070-5002, and the contracting activity is under the Department of Defense through the DDS New Cumberland Facility. The solicitation was posted on August 5, 2026, with a response deadline of August 17, 2026, and is accessible via the DIBBS online portal. Compliance with all NIST 800-171 controls must be achieved and sustained, and any cyber incidents involving covered defense information must be reported in accordance with federal requirements.