Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation of NIST SP 800-171 security controls to protect covered defense information in alignment with DFARS 252.204-7012, ensuring full compliance with federal cybersecurity requirements for contractors handling sensitive defense data. This includes establishing and maintaining robust technical, administrative, and physical safeguards to prevent unauthorized access, disclosure, or compromise of information, as well as establishing procedures for timely reporting of any cyber incidents affecting covered defense information. The subcontract is tied to the Department of Defense and is performance-based within San Antonio, Texas, at zip code 78226, with a deadline for response set for July 21, 2026. The work falls under NAICS code 541512 for computer systems design services, indicating the need for specialized cybersecurity expertise in system architecture, risk management, and compliance validation. While no set-aside designation or specific point of contact is provided, the solicitation is issued under a DLA DIBBS platform, and all responses must be submitted prior to the deadline. The contract aims to ensure the secure handling of covered defense information throughout the supply chain, with strict expectations around documentation, control enforcement, and incident response protocols as mandated by federal regulations.