Cybersecurity and Covered Defense Information Safeguarding

This contract requires the implementation of comprehensive cybersecurity safeguards to protect covered defense information in accordance with the Defense Federal Acquisition Regulation Supplement clause 252.204-7012 and the National Institute of Standards and Technology Special Publication 800-171. The contractor must establish, maintain, and continuously monitor a robust security framework that ensures the confidentiality, integrity, and availability of sensitive defense data handled within the scope of the subcontract. All security controls must align with the 110 requirements outlined in NIST SP 800-171, addressing areas such as access control, audit and accountability, configuration management, media protection, personnel security, risk assessment, and system and communications protection. The contract is classified as a subcontract under the NAICS code 541512, indicating it relates to computer systems design services, and is managed by the Department of Defense through the Maritime Supply Chain organization. Responses are due by July 29, 2026, with the opportunity posted on July 14, 2026. Compliance with these cybersecurity standards is mandatory and non-negotiable, as failure to meet the requirements could result in contract termination or penalties. The place of performance and point of contact details are not specified, but the work is expected to occur wherever the subcontractor's systems process or store covered defense information. All activities must be conducted with strict adherence to federal cybersecurity directives and documented to demonstrate ongoing compliance.