Cybersecurity Compliance for Covered Defense Information

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information, ensuring full compliance with DFARS 252.204-7012 requirements for audit readiness. The scope includes establishing technical, administrative, and physical safeguards aligned with NIST guidelines, as well as maintaining documentation and processes necessary to demonstrate continuous compliance during government audits. The contractor must ensure all systems handling covered defense information are properly configured, monitored, and updated to meet federal cybersecurity standards, with a focus on preventing unauthorized access, disclosure, or loss of sensitive data. The contract is structured as a subcontract under the Department of Defense, with performance located in New Cumberland, Pennsylvania, 17070-5002. It is classified under NAICS code 541512, indicating a focus on computer systems design and related services. The solicitation was posted on July 23, 2026, with responses due by August 3, 2026. While no set-aside designation is specified, the contract is part of a broader federal initiative to enforce robust cybersecurity practices across the defense supply chain. Contractors must be prepared to provide evidence of compliance through policies, procedures, and audit trails, and must have the technical capability to sustain these controls over the life of the agreement.