Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information handled by the contractor, ensuring full alignment with federal cybersecurity standards for defense contractors. Compliance includes establishing robust access controls, system integrity protections, audit capabilities, and incident response protocols, with a strict obligation to report any cyber incidents affecting covered information in accordance with required timelines and procedures. The work is scoped as a subcontract under the Department of Defense, specifically through the Active Devices Division, and performance must be conducted at the designated location in Newport, Rhode Island, with the ZIP code 02841-1703. The solicitation, issued under NAICS code 541512 for Computer Systems Design Services, has a response deadline of August 3, 2026, with the opportunity posted on July 23, 2026. There is no set-aside designation specified, and the contract does not indicate a point of contact. Interested parties must access the official solicitation via the provided DIBBS link to review full terms and submission requirements. Success requires not only technical implementation of the NIST controls but also ongoing monitoring, documentation, and readiness for audit or inspection to sustain compliance throughout the contract period.