Cybersecurity and Covered Defense Information Safeguarding

The contract requires the implementation of NIST SP 800-171 controls to protect covered defense information and ensure full compliance with DFARS cybersecurity requirements, including the timely reporting of any cyber incidents. This subcontract is focused on establishing and maintaining a robust cybersecurity framework that meets federal standards for safeguarding sensitive information handled within the defense supply chain. The performance location is designated as New Cumberland, Pennsylvania, with a zip code of 17070-5002, and the work falls under the NAICS code 541512, indicating it involves computer systems design and related services oriented toward cybersecurity implementation. The contract is issued by the Maritime Supply Chain office under the Department of Defense and is open for responses until August 3, 2026. The solicitation is categorized as a subcontract and is not subject to any specific set-aside designation. All parties involved must align their security practices with the specified NIST controls, ensure continuous monitoring of systems handling covered defense information, and maintain documented procedures for responding to and reporting cybersecurity events in accordance with DFARS mandates. The contractual obligations extend beyond technical implementation to include processes for assessment, compliance verification, and accountability throughout the lifecycle of the contracted work.