Cybersecurity Compliance for Covered Defense Information

This contract requires the implementation of NIST SP 800-171 security controls to protect Controlled Unclassified Information (CUI) in accordance with DFARS 252.204-7012, ensuring that all systems handling Covered Defense Information meet federal cybersecurity standards. The contractor must establish, document, and maintain a comprehensive cybersecurity program that includes access controls, audit logging, malware protection, configuration management, incident reporting, and continuous monitoring to safeguard CUI from unauthorized access or disclosure. Compliance with these requirements is mandatory and will be subject to validation through assessment or self-attestation processes aligned with government expectations. The work is to be performed at the designated place of performance in New Cumberland, Pennsylvania, with a response deadline of July 23, 2026, and is classified as a subcontract under NAICS code 541512 for Custom Computer Programming Services. The contracting entity is the Department of Defense through its Land Supply Chain organization, and the solicitation is publicly accessible via the DIBBS portal. All proposals must demonstrate proven experience in executing NIST 800-171 controls and timely cyber incident reporting procedures, as failure to comply may result in contract termination, financial penalties, or loss of future business opportunities with the Department of Defense.