Cybersecurity and Covered Defense Information Safeguarding

This contract requires the implementation of NIST Special Publication 800-171 controls to safeguard covered defense information used in the performance of the subcontract. The requirement centers on establishing, maintaining, and demonstrating compliance with the cybersecurity standards outlined in NIST SP 800-171 to ensure the confidentiality, integrity, and availability of sensitive defense data. The subcontractor must have the capability to meet these security controls, including but not limited to access control, audit, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, risk assessment, system and communications protection, and system and information integrity. The contract is issued under NAICS code 541512 for computer systems design services and is managed by the Department of Defense through the DLA Fleet Readiness Center DLA PSC. Performance is expected to occur in Cherry Point, North Carolina, with a response deadline of July 17, 2026. The solicitation is categorized as a subcontract and is available for bid through the DIBBS platform. Bidders must align their cybersecurity posture and documentation to satisfy federal requirements for handling controlled unclassified information in nonfederal systems, ensuring full compliance prior to award and throughout contract performance.