Subcontractor Cyber Incident Reporting and Compliance

This contract requires a subcontractor to comply with mandatory cyber incident reporting under DFARS 252.204-7009 and fraud reporting requirements under 52.204-24, ensuring adherence to Department of Defense standards for cybersecurity and integrity. The subcontractor must establish and maintain processes to detect, report, and respond to cyber incidents involving covered defense information, as well as implement procedures to identify and report suspected fraud. Training must be provided to relevant personnel to ensure understanding of reporting obligations, incident escalation protocols, and the handling of sensitive information. Disclosure of information related to these requirements is subject to strict restrictions, and the subcontractor must prohibit unauthorized dissemination of classified or controlled unclassified information. The performance location is Garmisch-Partenkirchen with a zip code of 82467, and the contract falls under NAICS code 541611 for management consulting services. The solicitation was posted on June 18, 2026, with a response deadline of July 7, 2026. The contracting activity is under the Department of Defense, specifically identified as 0409 Aq Hq Contract, and the subcontractor must operate under the terms of a federal subcontract without any set-aside designation. All activities must align with federal regulations governing defense contracting, and compliance with both cyber and fraud reporting obligations is mandatory for contract execution and continued eligibility.