Cybersecurity for Covered Contractor Information Systems

The contract requires the implementation of NIST SP 800-171 security controls across all covered contractor information systems to protect sensitive defense information, ensuring that systems handling such data meet federal cybersecurity standards. This includes the development and maintenance of a comprehensive System Security Plan that documents how each control is addressed, as well as full alignment with Department of Defense assessment protocols to validate compliance. The contractor must demonstrate operational readiness to meet these requirements without delay, with all systems and processes auditable under DoD oversight. Performance is tied to a location in Texarkana, Texas, with the contract classified as a subcontract under the NAICS code 541512 for computer systems design services. The solicitation, issued by the Department of Defense’s Construction & Equipment Manu & Con office, is active with a response deadline of August 10, 2026, and no set-aside provisions apply. All work must be executed in strict accordance with the mandated cybersecurity framework, and failure to meet assessment criteria may result in non-compliance penalties or contract termination.