Cybersecurity Compliance for Covered Defense Information

This contract requires the implementation of NIST SP 800-171 controls and compliance with DFARS 252.204-7012 to protect covered defense information and ensure timely reporting of cyber incidents. The work centers on establishing and maintaining a secure environment that meets federal cybersecurity standards for handling sensitive defense data, with a focus on safeguarding information systems that process, store, or transmit such data. All necessary technical, administrative, and physical safeguards must be deployed and documented to achieve full compliance with the specified regulatory frameworks. The contract is structured as a subcontract under the Department of Defense, with performance located in New Cumberland, Pennsylvania, 17070-5002, and is categorized under NAICS code 541512 for computer systems design services. The solicitation was posted on August 5, 2026, with responses due by August 17, 2026. Contractors must demonstrate proven capability in executing cybersecurity compliance initiatives aligned with NIST and DFARS requirements, including incident response procedures, audit trails, access controls, and continuous monitoring. Successful bidders will be expected to provide evidence of implemented controls and ongoing adherence to these standards throughout the contract period.