Cybersecurity Compliance for Covered Defense Systems

This contract requires full compliance with NIST SP 800-171 to protect covered defense information and ensure proper cyber incident reporting as mandated by DFARS clauses 252.204-7012 and 252.240-7997. The subcontractor must implement a robust cybersecurity framework that meets all specified security requirements for handling controlled unclassified information within defense systems, including timely reporting of any cyber incidents affecting covered contractor information systems. The work is performance-based and must be executed at the designated location in New Cumberland, Pennsylvania, with a zip code of 17070-5002, ensuring all security controls are physically and technically enforced at the site. The contract falls under NAICS code 541512, indicating it is related to computer systems design services, and is issued under the Department of Defense through the Active Devices Division. It is structured as a subcontract with no set-aside designation, and responses must be submitted no later than July 31, 2026. The solicitation is publicly accessible via the DIBBS portal, and bidders are expected to demonstrate proven experience in executing NIST-compliant cybersecurity programs within defense environments, along with the capability to maintain continuous compliance and incident response readiness throughout the contract term.