Cybersecurity Compliance for Covered Defense Information

The contract requires implementation of NIST SP 800-171 security controls and full compliance with DFARS 252.204-7012 for systems that process, store, or transmit covered defense information. This includes establishing robust cybersecurity measures to protect sensitive data, ensuring proper access controls, encryption, audit logging, and system integrity protections as mandated by the NIST framework. Contractors must also be prepared to report any cyber incidents involving covered defense information within 72 hours, providing detailed documentation and coordination with federal authorities as required under the DFARS clause. This subcontract is issued under the Department of Defense’s Land Supply Chain initiative with a place of performance in New Cumberland, Pennsylvania, 17070-5002. It falls under NAICS code 541512, indicating involvement in computer systems design services. The solicitation was posted on July 30, 2026, with responses due by August 10, 2026, and is accessible through the DIBBS portal. While no set-aside designation or point of contact is provided, all applicants must demonstrate current adherence to federal cybersecurity standards and the capability to sustain compliance throughout contract performance.