Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information within the contractor’s systems, in full alignment with the requirements of DFARS 252.204-7012. This includes establishing robust cybersecurity measures to prevent unauthorized access, ensuring data integrity, and facilitating timely cyber incident reporting as mandated by federal defense regulations. The contractor must demonstrate compliance with all applicable controls and maintain documentation to verify adherence throughout the contract period. This is a Small Business Set Aside subcontract under NAICS code 541512, awarded by the Naval Air Warfare Center Air Division under the Department of Defense, with performance required at a location with a zip code of 20670. The solicitation was posted on July 28, 2026, and responses are due by July 31, 2026, at 9:00 PM Eastern Time. Eligible entities must qualify as small businesses under SBA guidelines and be prepared to meet all cybersecurity obligations tied to handling sensitive defense information, with no exceptions for non-compliance.