Cybersecurity & Covered Defense Information Safeguarding

The contract requires full implementation and ongoing maintenance of NIST SP 800-171 controls to protect covered defense information handled by the contractor, ensuring compliance with DFARS 252.204-7012 for the reporting of cyber incidents. This includes establishing and sustaining a robust cybersecurity framework tailored to safeguard sensitive information, meeting all technical and procedural requirements outlined in the federal standards, and maintaining documented evidence of compliance at all times. The contractor must also have processes in place to detect, respond to, and report any cyber incidents affecting covered defense information within the mandated timeframes. This is a small business set-aside subcontract under NAICS code 541512, awarded by the Department of Defense through the Maritime Supply Chain office, with performance required at 17070-5002 New Cumberland. Responses are due by July 30, 2026, and the work must be performed by a qualified small business as defined by the SBA. The contractor will be expected to demonstrate proven capability in securing controlled unclassified information and fulfilling federal cybersecurity obligations, with continuous adherence to the specified controls and incident reporting protocols throughout the contract lifecycle.