Cybersecurity Compliance for Covered Defense Information

The contract requires implementation of NIST SP 800-171 security controls to protect covered defense information in alignment with DFARS 252.204-7012, ensuring robust cybersecurity measures are in place to safeguard sensitive data. This includes establishing technical, administrative, and physical safeguards to prevent unauthorized access, disclosure, or compromise, as well as fulfilling mandatory cyber incident reporting obligations should a breach occur. Compliance must be fully integrated into all systems and processes handling covered defense information, with continuous monitoring and documentation to verify adherence. The solicitation is a subcontract under the Department of Defense, specifically managed by the ASC Commodities Division, with performance required at Hill AFB, Utah, zip code 84056-5734. It falls under NAICS code 541512 for computer systems design services and has a response deadline of July 24, 2026. The contract does not specify a set-aside type or point of contact, and all submissions must be made through the DIBBS portal. Successful proposers must demonstrate proven capability in executing NIST 800-171 controls and managing DFARS-mandated reporting procedures under strict timelines.