Cybersecurity Clause Flow-Down & Subcontractor Compliance Management

The contract requires active management and verification of subcontractor compliance with two critical Department of Defense cybersecurity clauses, DFARS 252.204-7012 and 252.204-7020, which mandate the protection of controlled unclassified information and the implementation of security controls aligned with NIST SP 800-171. Performance entails ensuring that all relevant subcontractors complete and submit valid NIST SP 800-171 Assessment Reports to the Supplier Performance Risk System and maintain those assessments as current throughout the contract period. This includes ongoing monitoring, documentation verification, and corrective action coordination to uphold contractual obligations and safeguard sensitive defense information. The work is scoped under a subcontract with a North American Industry Classification System code of 541611, indicating a focus on management consulting services, and is tied to a performance location in N Stonington, with a zip code of 06359. The solicitation was posted on May 11, 2026, and response submissions are due by May 14, 2026. The contracting agency is the ASC Commodities Division under the Department of Defense, and participation is governed by the DIBBS platform, which serves as the official portal for solicitation access and submission. Compliance is non-negotiable and forms the foundation of the subcontractor relationship under this agreement.