Cybersecurity and Covered Defense Information Safeguarding

The contract requires implementation of NIST Special Publication 800-171 controls to protect covered defense information, ensuring compliance with federal cybersecurity standards for handling sensitive unclassified information. Contractors must establish and maintain a robust System Security Plan that documents all security controls, monitor systems for potential cyber incidents, and promptly report any breaches or suspicious activities in accordance with mandated timelines and procedures. The scope encompasses technical, administrative, and physical safeguards aligned with NIST guidelines to mitigate threats to defense data throughout the contract lifecycle. This subcontract is issued under the Department of Defense through the Maritime Supply Chain organization, with performance required at New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation, categorized under NAICS code 541512 for Computer Systems Design Services, is open for responses until July 30, 2026, with proposals due by 5:00 PM Eastern Time. All entities bidding must be prepared to demonstrate proven experience in securing federal contract information and maintaining continuous compliance with NIST 800-171 requirements, including regular plan updates and incident response readiness. The contract does not specify a set-aside category, making it open to all qualified bidders without preferential treatment.