Cybersecurity Compliance and CDI Protection

The contract requires full implementation of NIST SP 800-171 controls to protect Covered Defense Information, ensuring that all systems and processes handling such data meet federal cybersecurity standards. Compliance includes establishing robust access controls, audit logging, configuration management, and incident response procedures, with immediate reporting of any cybersecurity incidents affecting CDI. The requirement extends to all subcontractors through mandatory flow-down clauses, ensuring third-party entities adhere to the same security protocols and remain accountable for compliance. Work must be performed at the specified location in Alameda, California, with the North American Industry Classification System code 541512 indicating the scope centers on computer systems design and related services. Proposals must be submitted by the deadline of August 10, 2026, with this being a subcontract opportunity under the Department of Defense’s Maritime Supply Chain initiative. While no set-aside type is specified, the solicitation emphasizes stringent security expectations tied to defense information handling, making vendor experience with NIST 800-171 and prior DoD compliance efforts critical for successful bid evaluation. Although no point of contact is listed, all correspondence and submissions must follow the official DIBBS portal process via the provided link.