Cybersecurity and Covered Defense Information Safeguarding

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to safeguard covered defense information within the designated environment. This effort is critical to ensuring compliance with federal standards for protecting sensitive data handled by defense contractors, with a specific focus on securing information systems that store, process, or transmit controlled unclassified information. The contractor must establish, monitor, and continuously update technical and administrative safeguards to meet all requirements of the standard, including access control, audit logging, risk assessment, and incident response procedures. In addition to control implementation, the contract mandates reliable and timely incident reporting capabilities in the event of a cybersecurity breach or compromise involving covered defense information. All incidents must be reported according to established federal protocols, and the contractor is expected to support investigation and remediation efforts as needed. The work is to be performed at the Cherry Point location with a zip code of 28533-5040, under the oversight of the Department of Defense's ASC Commodities Division. The solicitation is classified as a subcontract with a NAICS code of 541512, and proposals must be submitted no later than July 31, 2026.