Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation and ongoing maintenance of security controls aligned with NIST SP 800-171 to safeguard covered defense information within the contractor’s systems and operations. This includes establishing, monitoring, and sustaining technical and procedural safeguards that meet federal requirements for protecting sensitive unclassified information related to defense contracts. The contractor must ensure full compliance with all applicable controls, conduct regular assessments, and promptly report any cyber incidents that compromise the confidentiality, integrity, or availability of covered defense information in accordance with mandated reporting timelines and procedures. Performance is tied to Hill Air Force Base, Utah, with the requirement that all cybersecurity measures are fully operational and auditable at the designated location. The contract is structured as a subcontract under the Department of Defense, specifically managed by the Fluid Handling Division, and falls under NAICS code 541512 for computer systems design services. Proposals must be submitted by the deadline of July 28, 2026, and successful bidders will be expected to demonstrate proven experience in implementing and managing NIST 800-171 frameworks, as well as the capacity to respond to and report cybersecurity events in a timely and compliant manner.