Cybersecurity Compliance for Covered Defense Information

The contract requires implementation of NIST SP 800-171 cybersecurity controls to safeguard covered defense information against unauthorized access, disclosure, or compromise. All applicable security requirements outlined in the NIST framework must be fully deployed and maintained throughout the performance period to meet federal compliance standards under DFARS clauses. In addition to control implementation, the contractor is obligated to promptly report any cyber incidents affecting covered defense information in accordance with specified reporting timelines and procedures. Failure to comply will result in contract penalties and potential loss of eligibility for future DoD work. This subcontract is tied to the Department of Defense and will be performed at the New Cumberland facility with a zip code of 17070-5002. The solicitation is categorized under NAICS code 541512, indicating it relates to computer systems design services. The response deadline is July 27, 2026, and the opportunity was posted on July 16, 2026. The contract is not subject to a set-aside classification and is not open to specific small business designations. All work must adhere strictly to DOD cybersecurity mandates, and the contractor assumes full responsibility for maintaining compliance, incident response, and audit readiness throughout the life of the subcontract.