Compliance and Cybersecurity Monitoring Subcontractor

The subcontract requires ongoing monitoring and reporting for cyber incidents, export control compliance under ITAR and EAR regulations, and adherence to federal regulatory requirements including Controlled Unclassified Information, Federal Acquisition Security Council requirements, and Diversity, Equity, and Inclusion mandates. The work is tied to federal contract clauses that demand continuous assessment, documentation, and reporting to ensure compliance across all specified domains, with particular emphasis on safeguarding sensitive data and maintaining regulatory alignment in a federal contracting environment. The performance location is in North Little Rock, Arkansas, with a zip code of 72114, and the contract falls under NAICS code 541611, indicating it involves administrative management and general management consulting services focused on compliance and security. The subcontract is issued by the Department of Veterans Affairs through its 256-NETWORK Contract Office 16 and is solicited as a federal subcontract with no set-aside designation. Responses are due by May 21, 2026, at 1:00 PM, following a posted date of May 13, 2026. The scope demands proactive identification and mitigation of cybersecurity threats, accurate classification and handling of controlled technical data, and implementation of policies aligned with federal mandates for CUI, FASC, and DEI. While no point of contact is listed, the subcontractor must demonstrate proven capability in managing compliance systems within a federal supply chain, maintaining audit-ready records, and delivering timely incident reports and compliance updates to meet the obligations of the underlying prime contract.