Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation of NIST SP 800-171 security controls to safeguard covered contractor information systems and ensure full compliance with DFARS requirements for handling covered defense information. This subcontract is specifically aimed at establishing a robust cybersecurity framework that aligns with federal standards to protect sensitive data transmitted, stored, or processed within contractor environments. The work must be performed at the designated place of performance in New Cumberland, Pennsylvania, with a zip code of 17070-5002, and is classified under NAICS code 541512 for computer systems design services. Responses to this solicitation are due by August 10, 2026, and the contract is posted under the Department of Defense’s Active Devices Division. Although no specific set-aside provisions apply, the focus is on securing information systems that support defense-related activities, requiring the contractor to rigorously adhere to NIST’s 110 security controls across 14 families without deviation. Compliance will be measured through documented policies, continuous monitoring, and evidence of control implementation, with potential audits or assessments expected to verify adherence throughout the contract duration.