Cybersecurity and Information Safeguarding

The contract requires full implementation of NIST SP 800-171 controls to protect covered defense information against unauthorized access, disclosure, or compromise. All subcontractors must establish and maintain a robust cybersecurity posture aligned with these standards, ensuring the confidentiality, integrity, and availability of sensitive data. Additionally, any cyber incident affecting covered information must be reported to the Department of Defense within the mandated timeframes to enable timely response and mitigation. The obligation extends to all systems and processes handling such data, regardless of location or infrastructure, with continuous compliance as a condition of performance. This is a subcontract under the Department of Defense’s Maritime Supply Chain initiative, governed by NAICS code 541512 for custom computer programming services. The solicitation was posted on August 4, 2026, with responses due by August 19, 2026. While no specific place of performance or set-aside designation is provided, compliance with federal cybersecurity mandates is non-negotiable and applies to all aspects of contract execution. Participation necessitates a demonstrated ability to meet NIST 800-171 requirements and maintain incident reporting protocols throughout the lifecycle of the subcontract arrangement.