Cybersecurity and CUI Safeguarding (for IT/Systems Support)

The contract requires the implementation of all NIST SP 800-171 security controls to protect covered defense information and ensure full compliance with DFARS clauses 252.204-7012 and 252.204-7009, which mandate the safeguarding of controlled unclassified information and the timely reporting of cyber incidents. The subcontractor must establish and maintain a robust cybersecurity posture aligned with federal standards to handle, store, and transmit sensitive defense data, with strict adherence to incident reporting timelines and procedures as defined by the Department of Defense. Performance is to be conducted at the specified location in New Cumberland, Pennsylvania, and the work falls under NAICS code 541512 for computer systems design services. The request for quotation is issued as a subcontract under the Maritime Supply Chain organization and must be responded to by August 13, 2026, with the opportunity available through the DIBBS platform. There is no set-aside classification, and all bidders must demonstrate proven capability to meet the stringent cybersecurity requirements outlined in the referenced regulations without deviation.