Cybersecurity Compliance and CDI Safeguarding

The contract requires full implementation and ongoing maintenance of NIST SP 800-171 security controls to protect Covered Defense Information, ensuring all systems handling such data meet federal cybersecurity standards. This includes conducting regular system assessments to verify compliance, developing and sustaining an incident response plan, and promptly reporting any cyber incidents in accordance with FAR 52.204-7012 requirements. The work is scoped as a subcontract under a Total Small Business Set-Aside, reserved exclusively for small business concerns as defined by the SBA, and falls under the NAICS code 541512 for computer systems design services. Performance is expected to support the Department of Defense’s Maritime Supply Chain organization, with all activities aligned to safeguard sensitive defense information across the contractor’s networks and systems. Proposals must be submitted by the deadline, and the contract is open to small businesses meeting the set-aside criteria without restriction based on organizational size beyond the small business classification.