Cybersecurity Compliance for Covered Defense Information

This contract requires the implementation of NIST SP 800-171 security controls to safeguard covered defense information and ensure full compliance with DFARS 252.204-7012 reporting obligations. The work involves establishing and maintaining a robust cybersecurity framework aligned with federal standards to protect sensitive information handled by the subcontractor, with specific emphasis on meeting all applicable reporting requirements related to cyber incidents and system security. Compliance is mandatory and will be monitored throughout performance. The contract is structured as a small business set-aside under the SBA’s Total Small Business Set-Aside program, with a NAICS code of 541512 for computer systems design services. It is issued by the Department of Defense’s Electrical Devices Division and requires performance at a designated location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on July 23, 2026, and responses are due by August 3, 2026. All bidders must be certified small businesses to qualify, and adherence to the specified cybersecurity controls is non-negotiable for award or continued performance.