Supply Chain Compliance & Cybersecurity Safeguarding

This contract requires the implementation of NIST SP 800-171 security controls to safeguard covered defense information and the establishment of a compliant cyber incident reporting process as mandated by DFARS clause 252.204-7012. The work involves ensuring that all systems, networks, and procedures handling sensitive defense data meet the full scope of NIST’s cybersecurity framework, including access control, audit, configuration management, and incident response requirements. The subcontractor must maintain continuous compliance and be prepared to report any cyber incidents affecting covered defense information within the prescribed timeframes and in accordance with government protocols. The contract is issued under the NAICS code 541611 for management consulting services and is categorized as a subcontract under the Department of Defense, specifically the ASC Commodities Division, with performance location in New Cumberland, PA 17070-5002. Interested parties must submit responses by August 6, 2026, following the solicitation posted on July 29, 2026, through the DIBBS portal. Compliance with these cybersecurity obligations is non-negotiable and critical for maintaining eligibility to handle controlled unclassified information in support of defense contracts.