Cybersecurity Compliance for Covered Systems

The contract requires the implementation and maintenance of robust cybersecurity safeguards across all covered information systems to ensure full compliance with DFARS 252.204-7012 and NIST SP 800-171 standards. This includes securing controlled unclassified information, applying required access controls, conducting regular system assessments, and establishing continuous monitoring procedures to detect and mitigate potential threats. All contractor systems handling sensitive government data must be configured and managed in accordance with the specified security requirements, with particular emphasis on protecting the integrity, confidentiality, and availability of information. The contractor is also obligated to report any cyber incidents promptly, following prescribed protocols outlined in the requirements, including timely notification to the appropriate government authorities and submission of detailed incident documentation. Performance of all cybersecurity obligations is tied to the place of performance in New Cumberland, PA, with the contract classified as a subcontract under NAICS code 541512. The solicitation was posted on July 30, 2026, and responses are due by August 10, 2026, under the oversight of the Department of Defense, specifically the Land Supplier Operations Vehicle Support office. Failure to meet these cybersecurity obligations or to report incidents as required may result in contract penalties or termination.