Cybersecurity & Controlled Information Compliance

This contract requires compliance with NIST SP 800-171 and DFARS 252.204-7012 to protect covered defense information, including sensitive data such as SDS and digital records, throughout all systems and processes under the subcontract. The subcontractor must implement robust cybersecurity controls to safeguard information from unauthorized access, ensure proper incident reporting procedures are in place, and maintain continuous alignment with federal cybersecurity standards applicable to defense contractors. All activities must occur within the designated place of performance located at FPO with ZIP code 96672, and the subcontract is classified under NAICS code 541512, indicating it pertains to other computer-related services supporting defense operations. The contract is issued by the Department of Defense under the LAND SUPPLY CHAIN organization and is structured as a subcontract with a response deadline of July 30, 2026, and a posted date of July 19, 2026. While no specific set-aside type is designated, the subcontractor is expected to fully understand and execute all requirements related to the handling, storage, transmission, and protection of controlled unclassified information in accordance with DoD mandates. Failure to meet these security and reporting obligations could result in contract termination or penalties, making thorough implementation of the specified cybersecurity framework a critical component of performance.