Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation and assessment of NIST SP 800-171 security controls to protect Controlled Unclassified Information (CUI) and ensure compliance with DFARS 252.204-7012, specifically addressing the safeguarding of Covered Defense Information. The successful contractor must establish and maintain a robust cybersecurity posture consistent with NIST guidelines, including configuring systems, conducting risk assessments, and documenting control effectiveness to meet federal standards for handling sensitive defense data. The scope encompasses not only technical implementation but also continuous monitoring, incident response readiness, and the timely reporting of any cyber incidents as mandated by the DFARS clause. This subcontract is issued under the NAICS code 541512 for Computer Systems Design Services and is performance-based with a place of performance in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on July 30, 2026, and responses are due by August 10, 2026, indicating a short turnaround for proposals. The contracting activity is the Department of Defense through LSO Combat Vehicles and Armament, and the work will involve close coordination to validate compliance with CUI protection requirements and ensure alignment with DoD cybersecurity expectations for subcontractors supporting defense programs.