Subcontractor Cybersecurity Flow-Down Management

The contract focuses on managing subcontractor compliance with cybersecurity requirements, specifically ensuring adherence to NIST SP 800-171 standards and Controlled Unclassified Information (CUI) handling protocols. It mandates the integration of Defense Federal Acquisition Regulation Supplement (DFARS) clauses into subcontract agreements and establishes monitoring mechanisms to oversee compliance throughout the supply chain. This is vital for safeguarding sensitive defense information and maintaining cybersecurity integrity. Issued by the Department of Defense at the DDSP New Cumberland Facility, the contract is identified under NAICS code 541611, which corresponds to administrative management and general management consulting services. The solicitation was posted on May 22, 2026, with a response deadline of May 28, 2026. The work is to be performed in New Cumberland, Pennsylvania, with the primary emphasis on ensuring subcontractors meet the stringent cybersecurity flow-down requirements to protect Department of Defense information systems.