Cybersecurity Compliance and CDI Safeguarding (NIST SP 800-171)

The contractor is required to implement and maintain all NIST SP 800-171 cybersecurity controls to protect Covered Defense Information as mandated by DFARS 252.204-7012, ensuring compliance with federal cybersecurity standards for handling sensitive defense data. This includes conducting regular system assessments to validate control effectiveness and promptly reporting any cybersecurity incidents that may compromise the integrity, confidentiality, or availability of Covered Defense Information. The work must be performed at the specified place of performance in Cherry Point, North Carolina, with all activities aligned to the requirements of the Department of Defense under the Maritime Supply Chain organization. This subcontract falls under NAICS code 541512, indicating it involves computer systems design and related services, and is intended for a targeted subcontracting opportunity. The solicitation was posted on July 29, 2026, with proposals due by August 10, 2026, requiring timely submission and full adherence to the cybersecurity framework outlined in NIST SP 800-171. The contractor must demonstrate robust capabilities in managing classified and controlled unclassified information in accordance with DoD standards, with no flexibility in meeting the mandated security controls or incident response protocols.