Cybersecurity for Covered Defense Information (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of cybersecurity controls to protect covered defense information in strict adherence to NIST SP 800-171 and DFARS 252.240-7997 requirements. The work involves ensuring that all systems handling sensitive defense data are configured, monitored, and audited to meet federal standards for safeguarding information against unauthorized access, disclosure, or compromise. This includes deploying technical, administrative, and physical safeguards, conducting regular assessments, and maintaining documentation to demonstrate continuous compliance. The subcontract is issued under the NAICS code 541512 for computer systems design services and is performance-based with a place of performance located in New Cumberland, Pennsylvania, with ZIP code 17070-5002. The contract is managed by the Department of Defense under the LSO Combat Vehicles and Armament office. Proposals must be submitted by July 27, 2026, and the solicitation was posted on July 16, 2026. While no set-aside designation is specified, the contract emphasizes strict adherence to cybersecurity frameworks and necessitates proven experience in securing controlled unclassified information within the defense supply chain.