Cybersecurity Compliance and CDI Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect Controlled Unclassified Information within the maritime supply chain environment, ensuring adherence to DFARS 252.204-7012 requirements for cyber incident reporting. This subcontract mandates a robust cybersecurity framework that encompasses access control, awareness and training, audit and accountability, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, risk assessment, system and communications protection, and system and information integrity to secure CUI at all stages of handling and storage. Performance is designated for Tracy, California with the NAICS code 541512 indicating specialty design services involving cybersecurity infrastructure and compliance. The submission window closes on July 23, 2026, and the offering is structured as a subcontract under the Department of Defense, specifically tied to Maritime Supply Chain operations. Contractors must demonstrate technical capability to fully satisfy NIST and DFARS mandates, with a focus on continuous compliance, real-time cyber incident detection, and prompt reporting as defined by federal regulations. Failure to maintain control effectiveness or report incidents accurately may result in contractual penalties or loss of eligibility for future work.