Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation and maintenance of cybersecurity safeguards to protect covered defense information in accordance with NIST SP 800-171 and DFARS 252.204-7012, ensuring that all systems handling such information meet federal cybersecurity standards. This subcontract is focused on securing sensitive data associated with Department of Defense operations, with compliance obligations extending to access controls, audit logging, incident response, system integrity, and configuration management. The performance location is New Cumberland, Pennsylvania, with the agency responsible being the Department of Defense through its DDSP NEW CUMBERLAND FACILITY. All work must be completed and maintained to meet regulatory requirements throughout the contract period. The solicitation was posted on July 5, 2026, with a response deadline of July 16, 2026, and is categorized under NAICS code 541512 for custom computer programming services. The contract does not specify a set-aside designation and is issued as a standard subcontract without additional socioeconomic preferences noted. Interested parties must submit proposals through the DIBBS portal using the provided link to be considered, and compliance with all cybersecurity controls outlined in NIST and DFARS is non-negotiable, forming the core requirement for qualification and ongoing performance. Failure to maintain compliance will result in contract termination and potential penalties.