Cybersecurity Compliance for Covered Defense Information

This contract requires the implementation of NIST SP 800-171 security controls to protect Covered Defense Information, accompanied by the development of a comprehensive System Security Plan that documents how these controls are applied and maintained within the contractor’s environment. Compliance with DFARS 252.204-7012 mandates timely reporting of any cyber incidents affecting the confidentiality, integrity, or availability of Covered Defense Information, ensuring immediate notification and coordination with government authorities. The effort is structured as a small business set-aside under the SBA program, specifically designated for total small business participation, and falls under the NAICS code 541512 for computer systems design services. Performance is centered in St. Columbans, Nebraska, with a response deadline of July 13, 2026, and the contract was posted on July 1, 2026, indicating an active procurement window for qualified small businesses to respond.