Cybersecurity Compliance for Covered Defense Information

This contract requires the implementation and documentation of NIST SP 800-171 security controls to safeguard covered defense information and ensure timely reporting of cyber incidents as mandated by the Defense Federal Acquisition Regulation Supplement. The work is part of a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, with performance located at Fort Stewart, Georgia, 31314-5185. The contractor must fully align with NIST’s framework for protecting sensitive federal information and comply with all DFARS requirements regarding incident response, documentation, and continuous security posture maintenance. The solicitation was posted on July 29, 2026, with responses due by August 10, 2026, and is classified under NAICS code 541512 for computer systems design services. The contract emphasizes adherence to federal cybersecurity standards without specifying any set-aside classifications, indicating it is open to eligible subcontractors regardless of business size or status. The successful party will be responsible for not only deploying technical safeguards but also generating comprehensive documentation to demonstrate compliance with all applicable controls and reporting obligations throughout the contract lifecycle.