Subcontractor Cybersecurity Assessment Management

The contract requires the management and verification of subcontractor compliance with NIST SP 800-171 and DFARS 252.204-7012 cybersecurity requirements, ensuring all subcontractors meet federal standards for protecting controlled unclassified information. The successful bidder will be responsible for conducting regular assessments, validating that cybersecurity controls are properly implemented, and maintaining up-to-date documentation that is promptly uploaded to the Supplier Performance Risk System. All assessments must be current and accurately reflect each subcontractor’s security posture to remain in compliance with Department of Defense regulations. The work is tied to a subcontracting arrangement under the NAICS code 541611, with performance centered at New Cumberland, Pennsylvania, 17070-5002. The opportunity is open for response until July 29, 2026, and is issued by the Department of Defense under the Construction & Equipment T & IFO EQ office. While no specific set-aside status is indicated, the contractor must be prepared to demonstrate proven experience in managing cybersecurity compliance across multiple subcontractors, ensuring continuous adherence to federal information security mandates and timely reporting through official DoD systems.