Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 19 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Cybersecurity Compliance (NIST SP 800-171 / DFARS 7012)

Active

Federal

Response Deadline08/17/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This contract requires the implementation of cybersecurity controls to safeguard covered defense information throughout manufacturing and logistics operations, in full alignment with NIST SP 800-171 and DFARS 7012 requirements. The work must be performed at the designated place of performance in New Cumberland, Pennsylvania, with ZIP code 17070-5002, and is classified as a subcontract under a Women-Owned Small Business Set-Aside, meaning only eligible WOSB firms may respond. The solicitation, issued by the Department of Defense’s Active Devices Division, targets organizations with expertise in securing sensitive defense data in industrial environments, with the NAICS code 541512 indicating the scope relates to computer systems design and related services. Bidders must submit their proposals by August 17, 2026, following the posting date of August 5, 2026, ensuring all cybersecurity controls are fully documented, implemented, and verifiable to meet federal standards for protecting controlled unclassified information.

General Info

Implement NIST SP 800-171 and DFARS 7012 cybersecurity controls at New Cumberland, PA, for WOSB subcontract.

Agency

Department Of Defense → ACTIVE DEVICES DIVISIONView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

NEW CUMBERLAND, PA, 17070-5002, US

Set-Aside

WOSB

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedAug 5

subcontract

Response DeadlineAug 17

Submission deadline

Response Deadline

08/17/2026, 05:00:00 PM UTCin 12 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → ACTIVE DEVICES DIVISION

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → ACTIVE DEVICES DIVISION

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Implementation of cybersecurity controls to protect covered defense information during manufacturing and logistics operations.

Similar Contracts

Same NAICS industry code

City of Lloydminster - Request for Proposal - COL - Electronic Permit Software

Solicitation # AB-2026-05511

The City of Lloydminster is inviting qualified vendors to submit proposals for the provision, implementation, configuration, training, and ongoing support of a modern electronic permitting software solution. The initiative aims to replace or upgrade existing systems with a comprehensive digital platform that streamlines permit issuance, increases operational efficiency, and improves public access to municipal services. The solicitation, identified as AB-2026-05511, was posted on August 5, 2026, with proposals due by September 1, 2026, at 8:00 PM. The solution must be fully customizable to meet the city’s specific workflow needs, integrate with existing systems where applicable, and include robust training for city staff and end users. Ongoing technical support and system maintenance are critical components of the contract to ensure continuous functionality and timely issue resolution. The project is led by Natasha Pidkowa, the City’s Project Lead, who can be contacted via email or phone for inquiries. The contract will be performed in Lloydminster, Alberta, and responses must be submitted through the Alberta Purchasing Connection portal. The city is seeking vendors with proven experience in delivering similar municipal permitting systems, a strong track record of customer service, and the ability to meet strict implementation timelines. While no set-aside program is specified, vendors must demonstrate financial stability, technical capability, and compliance with all applicable provincial standards. Selection will be based on a combination of technical merit, cost-effectiveness, vendor experience, and the quality of proposed support services.

City of Lloydminster

POSTED

about 8 hours ago

DEADLINE

Cybersecurity and Covered Defense Information (CDI) Safeguarding

CONSTRUCTION & EQUIPMENT MRO SVC I

POSTED

about 8 hours ago

DEADLINE

Cybersecurity Compliance & CMMC Assessment Support

CONSTRUCTION & EQUIPMENT MANU & CON

POSTED

about 8 hours ago

DEADLINE

Cybersecurity and CUI Compliance (NIST SP 800-171)The contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard Covered Defense Information in accordance with DFARS 252.204-7012 and the National Institute of Standards and Technology Special Publication 800-171. This involves establishing a robust security framework that meets all required controls for protecting Controlled Unclassified Information, ensuring compliance with federal cybersecurity standards applicable to defense contractors. The subcontractor must demonstrate the ability to deploy, monitor, and sustain these controls across all relevant systems and environments to meet compliance obligations and mitigate risks to national security information. The solicitation is set aside exclusively for Service-Disabled Veteran-Owned Small Businesses and is classified under NAICS code 541512 for Computer Systems Design Services. The contract is administered by the Strategic Acquisition Program Directorate within the Department of Defense, with responses due by August 20, 2026. While specific performance locations and point of contact details are not provided, the work is expected to be conducted in alignment with DoD cybersecurity mandates, requiring the contractor to maintain documentation, conduct assessments, and respond to audit or compliance verification requests as necessary. The subcontractor must possess the technical expertise and operational capacity to manage a full lifecycle of cybersecurity implementation and support under stringent federal requirements.

STRATEGIC ACQ PROGRAM DIRECTORATE

POSTED

about 8 hours ago

DEADLINE

Cybersecurity Compliance (CMMC Level 2 Support)

ASC SUPPLIER OPER AE AND AF DIV

POSTED

about 8 hours ago

DEADLINE

Cybersecurity Compliance (CMMC Level 2 Self-Assessment)The contract requires the performance of a Cybersecurity Maturity Model Certification (CMMC) Level 2 self-assessment to ensure compliance with U.S. Department of Defense requirements for handling covered defense information. The scope includes developing and supporting all necessary documentation to demonstrate adherence to CMMC Level 2 Controls, specifically those related to the protection of CDI across systems and processes. The assessment must validate implementation of security practices and procedures in alignment with DoD standards, with a focus on risk management and operational readiness for defense-related cybersecurity obligations. The activity is structured as a subcontract under the Department of Defense and is tied to a performance location at Cherry Point, North Carolina, with the ZIP code 28533-5040. The solicitation is categorized under NAICS code 541512, indicating it relates to computer systems design services. The offeror must submit a response by August 13, 2026, with the request publicly posted on August 5, 2026. Full compliance with CMMC Level 2 requirements is essential to meet contractual obligations, and failure to provide accurate, complete documentation may result in non-compliance and potential termination.

ASC SUPPLIER OPER OEM DIVISION

POSTED

about 8 hours ago

DEADLINE

Cybersecurity and Covered Defense Information SafeguardingThe contract requires the implementation and maintenance of cybersecurity controls to safeguard covered defense information in full compliance with NIST SP 800-171 and DFARS 252.204-7012, ensuring that all systems and processes handling sensitive government data meet stringent federal security standards. This subcontract is part of a broader Department of Defense initiative to secure information systems against cyber threats, with performance centered at NEW CUMBERLAND, PA, under NAICS code 541512 for computer systems design services. The solicitation was posted on August 5, 2026, and responses are due by August 17, 2026, with no set-aside classification specified, indicating open competition among qualified vendors. All parties must demonstrate proven capability to apply, monitor, and continuously update security controls aligned with NIST guidelines, with accountability for protecting controlled unclassified information throughout the contract lifecycle.

CONSTRUCTION & EQUIPMENT MANU & CON

POSTED

about 8 hours ago

DEADLINE

Cybersecurity Compliance (CMMC) Support

ASC COMMODITIES DIVISION

POSTED

about 8 hours ago

DEADLINE

Cybersecurity Compliance for Covered Defense InformationThe contract requires implementation of NIST SP 800-171 security safeguards and ongoing maintenance of cyber incident reporting procedures specifically tailored for the protection of covered defense information. This subcontract is designated as a Total Small Business Set-Aside under SBA regulations, ensuring eligibility and participation are limited to small businesses as defined by the SBA size standards for NAICS code 541512, which corresponds to Computer Systems Design Services. The place of performance is located in New Cumberland with a zip code of 17070-5002, and the contracting activity is under the Department of Defense through the DDS New Cumberland Facility. The solicitation was posted on August 5, 2026, with a response deadline of August 17, 2026, and is accessible via the DIBBS online portal. Compliance with all NIST 800-171 controls must be achieved and sustained, and any cyber incidents involving covered defense information must be reported in accordance with federal requirements.

DDSP NEW CUMBERLAND FACILITY

POSTED

about 8 hours ago

DEADLINE

Cybersecurity Compliance and Reporting (NIST SP 800-171)

CONSTRUCTION & EQUIPMENT MRO SVC I

POSTED

about 8 hours ago

DEADLINE

Cybersecurity and CUI Compliance SupportThe contract entails ongoing cybersecurity support to ensure compliance with NIST SP 800-171 and DFARS 252.204-7012 requirements for the protection of controlled unclassified information. This includes implementing and maintaining system safeguards, conducting regular assessments of security controls, and establishing processes for timely incident reporting in accordance with federal defense standards. The work is performed as a subcontract under the Department of Defense, specifically for the Defense Logistics Agency, and is classified under NAICS code 541512 for computer systems design services. The contract is designed to sustain continuous compliance posture, covering all aspects of CUI handling, from technical configuration to administrative and operational controls, ensuring alignment with DoD cybersecurity mandates throughout the duration of performance.

Defense Logistics Agency

POSTED

about 8 hours ago

DEADLINE

Cybersecurity Compliance for Defense SuppliersThe contract requires the implementation and documentation of cybersecurity safeguards for systems that handle controlled uncontrolled information, with full compliance to CMMC Level 2 and NIST SP 800-171 standards. This subcontract is specifically aimed at defense suppliers who must establish robust controls to protect sensitive data, including access management, audit logging, configuration control, and incident response procedures, all aligned with federal cybersecurity requirements. The work must be performed at Fort Knox, Kentucky, with a strict deadline for responses set for August 17, 2026, and the solicitation was posted on August 5, 2026. The NAICS code 541512 indicates the nature of the work as other computer-related services, and the contracting entity is the Department of Defense under LSO Combat Vehicles and Armament. All parties must ensure that their cybersecurity posture meets or exceeds the specified frameworks to maintain eligibility and contractual compliance.

LSO COMBAT VEHICLES AND ARMAMENT

POSTED

about 8 hours ago

DEADLINE

More opportunities from Department Of Defense → ACTIVE DEVICES DIVISION

Same awarding agency

Hazardous Materials Compliance and SDS ManagementThe contract requires comprehensive identification and documentation of hazardous materials within the CCA, with a focus on preparing and submitting Safety Data Sheets that meet both OSHA and Department of Defense standards. This work involves thorough evaluation of chemical substances, accurate classification according to regulatory criteria, and the timely creation of compliant SDS documents to ensure workplace safety and regulatory adherence across all applicable operations. The effort is critical to maintaining compliance with federal safety protocols and supporting defense-related activities where hazardous material handling is a core operational requirement. This subcontract is set aside exclusively for Women-Owned Small Businesses under the NAICS code 541620, which pertains to environmental consulting services. The solicitation was posted on August 5, 2026, with responses due by August 17, 2026, and the place of performance is designated as New Cumberland, Pennsylvania, with a zip code of 17070-5002. The contracting activity falls under the Active Devices Division of the Department of Defense, indicating that the work supports specialized defense systems or infrastructure. All deliverables must align precisely with federal safety regulations and be submitted through the designated federal procurement portal.

Environmental Consulting Services

POSTED

about 8 hours ago

DEADLINE

Electronic Component Sourcing and SupplyThe contract calls for the sourcing and supply of specialized electronic components, including those containing hazardous materials like mercury switches, with strict requirements for compliant packaging and full traceability throughout the supply chain. All deliveries must adhere to safety and environmental standards to ensure proper handling, storage, and documentation of controlled substances, reflecting the sensitive nature of the components and the regulatory obligations tied to their use. The effort is governed under a Women-Owned Small Business Set-Aside, designated with NAICS code 423690, and is issued as a subcontract by the Active Devices Division within the Department of Defense. Responses are due by August 17, 2026, with performance expected to be centered at the facility in New Cumberland, Pennsylvania, zip code 17070-5002.

Other Electronic Parts and Equipment Merchant Wholesalers

POSTED

about 8 hours ago

DEADLINE

Circuit Card Assembly (CCA) ManufacturingThe contract entails full manufacturing of a circuit card assembly to meet military specifications, covering all stages from component sourcing and printed circuit board fabrication to final assembly and quality verification. This is a subcontract opportunity designated specifically for Women-Owned Small Businesses under the WOSB Set-Aside program, with the North American Industry Classification System code 334418 indicating electronics manufacturing services. The work must be performed at the designated location in New Cumberland, Pennsylvania, with a zip code of 17070-5002, and is sponsored by the Active Devices Division under the Department of Defense. The solicitation was posted on August 5, 2026, and responses are due by August 17, 2026, with all submissions required to align with military standards for reliability, performance, and traceability under stringent defense procurement protocols.

Printed Circuit Assembly (Electronic Assembly) Manufacturing

POSTED

about 8 hours ago

DEADLINE

Supply of Telephone Jacks (NSN 5935-00-192-4789)The contract entails the procurement and delivery of three units of a military-specification or commercially equivalent telephone jack component identified by NSN 5935-00-192-4789 under a firm-fixed-price structure, ensuring defined costs with no adjustment for actual expenses. The requirement is classified under NAICS code 334220, indicating it pertains to telecommunications equipment manufacturing, and is structured as a subcontract within the Department of Defense’s acquisition framework. Delivery is to be performed at a designated location in Tracy, California, with a zip code of 95304-5000, and the awarding activity is the Active Devices Division under the Department of Defense. The solicitation was posted on August 5, 2026, with a formal response deadline set for August 20, 2026, providing a sixteen-day window for proposers to submit offers. The contract type emphasizes cost certainty and predictable delivery timelines, aligned with government supply chain standards for critical communication infrastructure components.

Radio and Television Broadcasting and Wireless Communications Equipment Manufacturing

POSTED

about 8 hours ago

DEADLINE

Cybersecurity and CUI Protection ServicesThe contract requires the implementation and maintenance of comprehensive cybersecurity controls for systems that handle controlled unclassified information, ensuring full alignment with NIST SP 800-171 and DFARS 252.204-7012 requirements. This includes establishing robust protective measures, continuous monitoring, and the capability to detect, respond to, and report cybersecurity incidents promptly. The contractor must also provide forensic support to investigate and document security breaches, preserving evidence and enabling root cause analysis in accordance with federal standards. This subcontract is issued under the Department of Defense’s Active Devices Division, with performance centered at New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation, categorized under NAICS code 541512 for computer systems design services, was posted on August 5, 2026, with a response deadline of August 19, 2026. The work is essential to safeguarding sensitive government information and maintaining compliance across the defense supply chain, necessitating proven expertise in securing CUI environments and understanding of DoD-specific security mandates.

Computer Systems Design Services

POSTED

about 8 hours ago

DEADLINE

Quality Assurance and Technical Data ManagementThe contract requires provision of quality systems oversight, documentation control, and technical data management specifically for optoelectronic display production, with a strict emphasis on maintaining compliance with ISO 9001-2015 standards and ensuring those requirements are effectively flow-downed to all sub-tier suppliers. The work involves establishing and sustaining robust processes to guarantee product integrity, traceability, and regulatory adherence throughout the supply chain, with particular focus on technical data accuracy and lifecycle management for critical display systems. This is a subcontract under the Department of Defense’s Active Devices Division, with performance location in New Cumberland, Pennsylvania, 17070-5002. The solicitation is classified under NAICS code 541330 for engineering services and was posted on August 5, 2026, with responses due by August 19, 2026. The contract is open to qualified subcontractors without a specified set-aside designation, and participation requires the ability to meet stringent defense quality and documentation standards tied to optoelectronic manufacturing operations.

Engineering Services

POSTED

about 8 hours ago

DEADLINE

Optoelectronic Display Manufacturing and SupplyThe contract involves the manufacture and supply of military-grade optoelectronic display units identified by NSN 5980-01-593-7305 and part number CA66733-001, with full lifecycle management encompassing production, quality assurance, and end-to-end logistics. The work must adhere to stringent defense standards, ensuring operational reliability in demanding environments, and includes all aspects of manufacturing from initial fabrication through final testing and delivery. The items are to be delivered to the designated performance location in New Cumberland, Pennsylvania, with the contractor responsible for meeting all technical, scheduling, and compliance requirements throughout the supply chain. Issued as a subcontract under the Department of Defense’s Active Devices Division, the opportunity is classified under NAICS code 334413 for electronic component and product manufacturing. The solicitation was posted on August 5, 2026, with a firm response deadline of August 19, 2026. All submissions must align with the technical specifications and quality control protocols mandated by military procurement guidelines. The contracting entity retains full oversight to ensure compliance, and successful bidders will be expected to support sustained delivery schedules without disruption, maintaining data integrity and traceability across the production sequence.

Semiconductor and Related Device Manufacturing

POSTED

about 8 hours ago

DEADLINE

Technical Data and Marking ServicesThe contract requires the provision of IPC/JEDEC-compliant marking for lead content, clearly distinguishing between lead-containing and lead-free components, along with complete technical documentation for each unit pack. This service ensures regulatory compliance and traceability across the supply chain, meeting stringent military and industrial standards for electronic components. The work must be performed to exact specifications to support accurate identification and handling of materials in defense-related applications. The contract, titled Technical Data and Marking Services, is classified as a subcontract under NAICS code 541380 and is issued by the ACTIVE DEVICES DIVISION of the Department of Defense. The place of performance is specified as Columbus, Ohio, with a zip code of 43213. The solicitation was posted on August 5, 2026, and responses are due by August 17, 2026. No set-aside designation is applicable, and no point of contact information is provided within the data, though further details can be accessed through the provided DIBBS link.

Testing Laboratories and Services

POSTED

about 8 hours ago

DEADLINE

ESD/EMI Protective Packaging SupplyThe contract demands the supply of ESD/EMI protective packaging materials that meet the stringent requirements of MIL-PRF-81705, specifically designed to safeguard sensitive microcircuit leads from electrostatic discharge and electromagnetic interference. The packaging must include form-fitting cushioning elements engineered to securely hold and isolate components during transport and storage, ensuring product integrity under demanding military and aerospace conditions. All materials must be DOD-qualified and fully compliant with applicable defense standards, with no deviations permitted without prior approval. The opportunity is structured as a subcontract under the ACTIVE DEVICES DIVISION of the Department of Defense, with performance required at a designated location in Columbus, Ohio, zip code 43213. The NAICS code 326199 indicates the work falls under other plastic product manufacturing, underscoring the specialized nature of the packaging production. The solicitation was posted on August 5, 2026, with a hard deadline for responses set for August 17, 2026, and interested parties must submit proposals through the official DIBBS platform linked in the documentation. No set-asides or small business preferences are specified, and the procurement is open to qualified subcontractors capable of delivering fully compliant packaging solutions at scale.

All Other Plastics Product Manufacturing

POSTED

about 8 hours ago

DEADLINE

Microcircuit, Digital Component SupplyThe contract calls for the supply of ten units of a digital microcircuit identified by NSN 5962011507476 and ESA-approved part number DS78LS120J/883, sourced from the original equipment manufacturer or an authorized distributor, with CAGE code 27014. The requirement is for military-grade components meeting strict quality and traceability standards, intended for use in defense applications. The solicitation is structured as a subcontract under NAICS code 334413, relating to semiconductor and related device manufacturing, and is issued by the Active Devices Division under the Department of Defense. The response deadline for submissions is August 17, 2026, with the solicitation posted on August 5, 2026. Performance is to be carried out at Columbus, Ohio, with ZIP code 43213 as the designated place of performance. The contract does not specify any set-aside status or small business preferences, and no point of contact details are provided in the data. The full solicitation can be accessed through the DIBBS system using the provided link, and bidders must ensure full compliance with component certification, packaging, and delivery requirements consistent with federal defense procurement standards.

Semiconductor and Related Device Manufacturing

POSTED

about 8 hours ago

DEADLINE

SOLENOID, ELECTRICAL

Solicitation # SPE7M5-26-T-368C

This contract specifies the procurement of one electrical solenoid, identified by NSN 5945-01-338-5435 and part number 61245 from Getinge USA Inc., with delivery required within 20 days FOB origin. The unit of issue is one each, with no variance allowed in quantity. All supplies must comply with DLA packaging requirements, including commercial packaging standards and protection against damage during transit. Each unit must be sealed in a suitable container and packed in exterior shipping containers that ensure safe delivery at the lowest transportation cost. Palletization is mandatory for shipments exceeding 250 pounds or 20 cubic feet, using Type IV or Type V 4-way entry pallets measuring 40 by 48 inches, with total load dimensions capped at 54 inches in height, 43 inches in length, and 52 inches in width. Exceptions apply for oversized items, requiring coordination with the contracting officer. The solenoid must be free from intentional addition of mercury or mercury-containing compounds, except in narrowly defined cases such as batteries, instruments, or weapons systems specified by NAVSEA, and portable devices containing mercury must have shockproof design and a secondary containment. Marking requirements follow Medical Marking Standard No. 1, superseding MIL-STD-129 for all medical acquisitions, and include NSN, government quantity, and unit of issue on each unit. Additional labeling must comply with IPC/JEDEC J-STD-609 for lead-free component identification. Passive RFID tags are required for shipments to DLA distribution locations, unless exempted by FSC codes 6505, 6508, 6509, or 6550. Wood packaging material must be heat-treated or kiln-dried per DOD requirements. Deliveries are directed to USS TRIPOLI LHA 7 in FPO AP, and the contract explicitly prohibits removal of government identification from non-accepted supplies. All technical and quality requirements are governed by the DLA Master List, with revisions controlled by the solicitation or award date depending on acquisition size.

Aircraft Manufacturing

POSTED

about 8 hours ago

DEADLINE

RETAINER, ELECTRICAL

Solicitation # SPE7M5-26-Q-0839

The contract pertains to the procurement of 13 electrical retainers with NSN 5935-01-466-5336 under solicitation SPE7M5-26-Q-0839, issued by the Defense Logistics Agency’s Active Devices Division. The delivery is required within 134 days after award, and responses must be submitted by August 19, 2026. Technical and quality requirements are governed by the DLA Master List of Technical and Quality Requirements, with the applicable revision determined by the solicitation issue date for simplified acquisitions or the RFP issue date for large acquisitions, unless amended. Specific requirements include the removal of government identification from non-accepted supplies, physical marking of bare items, and strict adherence to export control regulations under ITAR or EAR, which restrict the disclosure of technical data to foreign persons, regardless of location, and impose obligations on both U.S. and foreign-owned entities. Access to controlled technical data is restricted to contractors authorized by DLA who hold a valid US/Canada Joint Certification Program certification, have completed mandatory training on handling DOD export-controlled data, and have passed the DLA Export-Controlled Technical Data Questionnaire. The place of performance is designated as Anniston, Alabama, with Andrew Bracken listed as the primary point of contact.

Current-Carrying Wiring Device Manufacturing

POSTED

about 8 hours ago

DEADLINE