Cybersecurity Compliance for Covered Defense Information

This contract requires the implementation of NIST SP 800-171 safeguards to protect covered defense information handled on systems under the supervision of the Active Devices Division within the Department of Defense. The work involves establishing and maintaining a comprehensive cybersecurity framework compliant with the NIST standard, ensuring all necessary administrative, physical, and technical controls are fully integrated into the IT environment. The contractor must also establish and validate procedures for timely cyber incident reporting in accordance with federal requirements, ensuring any breaches or suspicious activity affecting covered defense information are detected, documented, and reported without delay. The performance location is Robins Air Force Base, Georgia, with a compliance deadline of July 16, 2026, and the contract is structured as a subcontract under NAICS code 541512 for custom computer programming services. All activities must align with the Department of Defense’s expectations for safeguarding sensitive information, and the contractor is expected to have demonstrated expertise in defense cybersecurity standards and incident response protocols. The solicitation does not specify a set-aside classification, and while no point of contact is listed, all responses must be submitted through the official DIBBS platform prior to the deadline.