Cybersecurity Compliance for Defense Suppliers (DFARS 252.204-7012)

This contract mandates the implementation of NIST SP 800-171 security controls to safeguard covered defense information, particularly for systems that interact with the Wide Area Workflow system or handle technical data subject to Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012 requirements. All subcontractors must establish and maintain a compliant cybersecurity posture, ensuring the protection of sensitive unclassified information throughout its lifecycle, including transmission, storage, and processing, with strict adherence to the specified control family requirements outlined in the NIST framework. Compliance is non-negotiable and must be fully operational prior to system access or data handling. The solicitation is a total small business set-aside under the SBA program, exclusively available to qualified small businesses as defined by the NAICS code 541512, which encompasses computer systems design services. The place of performance is designated as Texarkana, Texas, with a zip code of 75507-5000, indicating that physical operations or system access relevant to the contract must occur at or be coordinated through this location. Responses are due by August 12, 2026, and the contract is issued under the Department of Defense’s Active Devices Division, signaling its direct relevance to defense electronics, communications, or related technical systems requiring stringent cybersecurity protection. Failure to meet these requirements could result in contract termination, financial penalties, or loss of eligibility for future DoD opportunities.