Cybersecurity Compliance for Covered Defense Information

The contract requires implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information, ensuring compliance with federal cybersecurity standards for nonfederal systems handling sensitive DoD data. The contractor must establish and sustain controls related to access control, audit and accountability, configuration management, identification and authentication, incident response, and system and communications protection, with full documentation and adherence to all specified technical and procedural requirements. Regular system audits and timely incident reporting are mandatory to detect, respond to, and remediate cybersecurity events affecting covered information. Performance is to be conducted at Hill AFB, Utah, with a strict deadline for responses by August 10, 2026, and the contract falls under the NAICS code 541512 for computer systems design services. This is a subcontract opportunity issued by the Active Devices Division of the Department of Defense, with no specific set-aside designation. While the point of contact details are not provided, the solicitation is accessible through the DIBBS portal and expects full alignment with NIST’s framework for protecting controlled unclassified information within defense contractor environments.