Cybersecurity Compliance & CDI Safeguarding

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to protect Covered Defense Information, ensuring compliance with DFARS 252.204-7012. This includes establishing technical and administrative safeguards to prevent unauthorized access, disclosure, or loss of sensitive data handled under the agreement. The contractor must perform regular self-assessments to evaluate the effectiveness of these controls and document their compliance status, while also being prepared to report any cyber incidents promptly in accordance with federal requirements. This is a subcontract under the Department of Defense, specifically managed by the Maritime Supply Chain division, targeting organizations within the 541512 NAICS code category for custom computer programming services. The solicitation was posted on July 22, 2026, with responses due by August 6, 2026. Performance of the work is not tied to a specific geographic location, and the contractor is expected to maintain robust cybersecurity posture regardless of where the work is executed, ensuring continuous protection of defense-related information throughout the lifecycle of the subcontract.