Cybersecurity Compliance for Covered Defense Information

This contract requires the implementation and assessment of NIST SP 800-171 security controls to safeguard covered defense information, ensuring compliance with federal cybersecurity standards for contractors handling sensitive government data. The scope includes developing a System Security Plan, maintaining a Plan of Action and Milestones to address identified gaps, and establishing processes for timely cyber incident reporting in accordance with regulatory requirements. All activities must align with the specifications outlined in NIST SP 800-171 to protect the confidentiality, integrity, and availability of controlled unclassified information. The contract is structured as a subcontract under the Department of Defense, specifically issued by the ASC SUPPLIER OPER OEM DIVISION, and is categorized under NAICS code 541512 for computer systems design services. The solicitation was posted on August 3, 2026, with a response deadline of August 11, 2026, indicating a short turnaround for proposals. Performance is expected to occur in support of DoD operations, though no specific location is designated. Contractors must demonstrate proven capability in cybersecurity compliance, documentation, and incident response to qualify and meet the obligations outlined in the agreement.