Cybersecurity Compliance for Covered Defense Information

The contract requires implementation of NIST SP 800-171 security controls to protect covered defense information on systems operated by the contractor, ensuring compliance with federal cybersecurity standards for handling sensitive defense data. The agreement mandates full adherence to the technical, administrative, and physical safeguards outlined in NIST SP 800-171 and includes obligations to report any cyber incidents affecting such systems in accordance with DFARS 252.204-7012, including timely notification and cooperation in forensic investigations. The work is classified as a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, with performance expected to take place in Greensboro, North Carolina, at the designated zip code 27409. The NAICS code 541611 indicates the primary business activity involves computer systems design and related services, emphasizing the technical nature of the compliance and reporting responsibilities. All proposals must be submitted by the deadline of August 17, 2026, with the solicitation initially posted on August 5, 2026, allowing for a twelve-day response window. There is no specified set-aside classification, meaning the contract is open to all qualifying subcontractors regardless of size or ownership status. The contractor must possess the capability to deploy, maintain, and audit NIST controls across all relevant systems, and maintain documentation demonstrating ongoing compliance. Incident reporting procedures must align with DoD requirements, and the contractor is expected to integrate these processes into their existing cybersecurity frameworks without disruption to operations. The contract does not specify a point of contact, so all inquiries must be directed through the provided DIBBS portal linked in the solicitation.