Cyber Incident Reporting and Covered Defense Information Safeguarding

The contract requires the implementation and ongoing maintenance of cybersecurity protections to safeguard covered defense information in accordance with DFARS 252.204-7012 and NIST SP 800-171 standards. This subcontract is focused on ensuring robust security controls are in place to prevent unauthorized access, disclosure, or compromise of sensitive data, with a strict mandate to report any cyber incidents promptly. The work is to be performed at MCBH Kaneohe Bay, HI, 96863-3063, under the oversight of the Department of Defense’s Medical Supply Chain MD Surg FSF. All cybersecurity measures must align precisely with federal requirements for protecting controlled unclassified information within nonfederal systems. The solicitation is categorized under NAICS code 541512, indicating it pertains to computer systems design and related services. Subcontractors must respond by the deadline of July 27, 2026, and are expected to demonstrate proven capability in meeting the stringent security protocols outlined by NIST and the Defense Federal Acquisition Regulation Supplement. The contract emphasizes continuous compliance, incident response readiness, and the documentation of security practices to support audit and assessment requirements. There is no specified set-aside type, and the procurement is open to qualified entities capable of delivering compliant cybersecurity services within the designated performance location.