Cybersecurity and Covered Defense Information Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information held by the contractor, ensuring compliance with Department of Defense cybersecurity standards. The scope includes establishing robust protective measures for CDI and fulfilling mandatory cyber incident reporting obligations as stipulated under DoD contractual requirements, with an emphasis on timely detection, response, and notification of security breaches. All activities must align with the technical and procedural expectations outlined in NIST SP 800-171 to ensure the integrity, confidentiality, and availability of sensitive defense data. This is a small business set-aside subcontract under NAICS code 541512, issued by the Maritime Supply Chain organization within the Department of Defense. The solicitation was posted on August 9, 2026, with proposals due by August 24, 2026, targeting small businesses exclusively as part of a total small business set-aside. The place of performance and contact details are not specified, but performance is expected to support DoD contract obligations regardless of location. Compliance with these cybersecurity requirements is critical for contract award and continued performance, and failure to meet NIST SP 800-171 standards may result in penalty, termination, or loss of eligibility for future DoD work.