Defense Supply Chain Compliance and Cybersecurity Support

This contract requires full adherence to NIST SP 800-171 and DFARS 252.204-7012 standards to ensure the protection of Controlled Unclassified Information throughout the defense supply chain. The responsible party must implement comprehensive cybersecurity controls to safeguard CUI, enforce mandatory clause flow-down to all subcontractors and suppliers, and maintain accountability for compliance at every tier of the contractual relationship. The work is focused on securing information systems that handle sensitive defense data and requires documented processes for access control, incident reporting, system monitoring, and continuous compliance validation. Performance is designated to occur at New Cumberland, Pennsylvania, with a response deadline of August 14, 2026, and the contract falls under the NAICS code 541611 for management, scientific, and technical consulting services. The solicitation is issued by the Active Devices Division within the Department of Defense and is structured as a subcontract, indicating it is intended to support broader defense contracting efforts. All parties must be prepared to demonstrate rigorous cybersecurity hygiene, maintain audit readiness, and ensure alignment with federal mandates governing the protection of unclassified but sensitive information across the defense industrial base.