Cybersecurity & Data Compliance for Subcontractors

The contract requires all subcontractors to adhere strictly to cybersecurity and data compliance standards including the SPSAQ framework, NIST Special Publication 800-88 for media sanitization, and mandatory U.S.-only data hosting to ensure sensitive information remains within domestic borders. Subcontractors must implement and maintain robust data governance practices to safeguard information integrity, confidentiality, and availability throughout the contract period. Regular compliance audits will be conducted to verify adherence to these requirements, and failure to meet standards may result in termination or corrective action. This subcontract is issued under NAICS code 541690 for other scientific and technical consulting services and is managed by York Technical College in South Carolina. The solicitation was posted on July 22, 2026, with a firm deadline for responses on August 24, 2026. All parties must ensure their processes, storage systems, and data handling procedures align with federal cybersecurity norms and are fully documented to support audit readiness. Participation requires demonstrated ability to meet U.S. data residency rules and a clear understanding of the rigorous compliance expectations tied to this engagement.