Cybersecurity & Covered Defense Information Protection

The contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard covered defense information in alignment with NIST SP 800-171 standards and the DFARS 252.204-7012 clause, which mandates timely incident reporting for any compromise or suspected breach. All cybersecurity measures must be fully operational and continuously monitored to ensure compliance, with a clear focus on protecting sensitive data shared within the defense supply chain. The contractor is expected to maintain robust access controls, data encryption, audit logging, and vulnerability management practices as prescribed by the referenced frameworks. This subcontract is issued under the NAICS code 541512 for computer systems design services and is associated with the Department of Defense’s Aviation Supply Chain ESOC Buys division. Performance is required at the designated location in Bremerton, Washington, with a zip code of 98314-5001. The solicitation was posted on July 21, 2026, and responses are due by July 29, 2026. While no set-aside classification is specified, the contractual obligations are binding and critical to sustaining the integrity of defense-related information systems. Failure to meet compliance requirements may result in contract penalties or termination.