Cybersecurity Compliance for Covered Defense Information

The contract requires full implementation of NIST SP 800-171 security controls to safeguard covered defense information handled by the contractor, ensuring compliance with the cybersecurity standards mandated for Department of Defense subcontractors. This includes establishing robust access controls, data encryption, audit logging, system integrity monitoring, and personnel security practices aligned with the NIST framework. The contractor must also demonstrate readiness to report any cyber incident involving covered defense information within 72 hours, as stipulated by DFARS 252.204-7012, and maintain documented procedures for incident response and coordination with federal authorities. The subcontract is issued under the NAICS code 541512 for computer systems design services, with performance located in New Cumberland, Pennsylvania, under the oversight of the Department of Defense’s Land Supply Chain. The request for quotation is publicly accessible through the DIBBS platform and closes on August 3, 2026, with no set-aside designation. The contractor is expected to have the technical capability and organizational infrastructure to meet these stringent cybersecurity obligations without reliance on external remediation, ensuring continuous protection of sensitive defense data throughout the contract lifecycle.