Cybersecurity Compliance for Covered Defense Information

The contract requires implementation and maintenance of NIST SP 800-171 security controls to safeguard covered defense information in alignment with DFARS 252.204-7012 compliance requirements. This subcontract is part of a broader effort by the Department of Defense’s Active Devices Division to ensure robust cyber protections across its supply chain, with performance specifically tied to Hill AFB, Utah, at the ZIP code 84056-5713. The work focuses on establishing, documenting, and sustaining a secure environment that meets federal standards for protecting controlled unclassified information, with ongoing monitoring and reporting anticipated as part of the maintenance obligations. The solicitation was posted on July 13, 2026, with responses due by July 24, 2026, and falls under the NAICS code 541512 for Computer Systems Design Services. The contract does not specify a set-aside status and is managed under the DIBBS platform, indicating it is part of the Defense Logistics Agency’s procurement ecosystem. While no point of contact is listed, bidders must demonstrate technical expertise in cyber compliance frameworks and the proven ability to operationalize NIST controls within a defense contractor environment. Execution will require continuous adherence to regulatory timelines, audit readiness, and integration with existing DoD information systems at the designated performance location.