Cybersecurity Safeguarding of Covered Defense Information

The contract requires implementation of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information (CUI) and ensure compliance with DFARS 252.204-7012 requirements for cyber incident reporting. This subcontract mandates that all systems handling covered defense information adhere to a defined set of cybersecurity practices designed to protect CUI from unauthorized access, disclosure, or compromise. The contractor must establish and maintain a robust cybersecurity framework aligned with NIST standards and be prepared to report any cyber incidents affecting CUI in accordance with federal guidelines. The contract is associated with the NAICS code 541512 and is managed by the ACTIVE DEVICES DIVISION under the Department of Defense, with performance centered in Columbus, Ohio, ZIP 43213. Responses are due by August 6, 2026, and the solicitation was posted on July 26, 2026. The place of performance and regulatory obligations necessitate that the contractor has the technical capacity, personnel training, and documentation processes in place to demonstrate ongoing compliance. Failure to meet these requirements could result in contract noncompliance, financial penalties, or loss of eligibility for future DoD work.