Cybersecurity Compliance for Covered Defense Information

The contract requires implementation of NIST SP 800-171 security controls to safeguard covered defense information on nonfederal systems, ensuring compliance with DFARS 252.204-7012. All applicable cybersecurity measures must be fully deployed to protect sensitive data transmitted, processed, or stored by the contractor, with strict adherence to reporting requirements that mandate notification of any cyber incident to the Department of Defense within 72 hours of discovery. The contractor is expected to maintain ongoing compliance throughout the performance period and demonstrate the ability to respond to and mitigate cyber threats in alignment with federal standards. This subcontract is issued under NAICS code 541512, associated with computer systems design services, and is tied to performance at New Cumberland, PA, with a response deadline of August 10, 2026. The solicitation originates from the Department of Defense under the agency name LAND SUPPLIER OPNS VEHICLE SPT, indicating support for defense logistics and vehicle systems. While details such as point of contact and set-aside status are not provided, the urgency of compliance and the specificity of the regulatory framework underscore the critical nature of cybersecurity readiness for this obligation.