Cybersecurity and NIST SP 800-171 Compliance Support

The contract requires the implementation and ongoing maintenance of cybersecurity controls designed to safeguard covered defense information in alignment with NIST Special Publication 800-171 requirements. It also mandates strict adherence to DFARS incident reporting protocols to ensure timely notification and response to any cybersecurity breaches or anomalies affecting controlled unclassified information. The work must be performed at the specified location in Bremerton, Washington, with all systems and procedures fully compliant with federal standards for information security within the defense supply chain. This subcontract, issued under NAICS code 541512 by the Department of Defense's ASC Commodities Division, is part of a broader effort to strengthen cybersecurity posture across contracted operations. Interested parties must submit responses by the deadline of July 29, 2026, and are expected to demonstrate proven capability in deploying and sustaining NIST 800-171 controls, managing incident response workflows, and maintaining audit-ready documentation. The focus is on continuous compliance, operational resilience, and the protection of sensitive defense data throughout the lifecycle of the subcontracted services.