Cybersecurity Compliance & Controlled Information Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information processed, stored, or transmitted on contractor systems. It also mandates full support for the annual Department of Defense assessment process to verify compliance with these controls and adherence to federal cybersecurity standards. Contractors must establish and sustain systems and procedures that ensure timely cyber incident reporting as required by DFARS 252.204-7012, including immediate notification of any security breaches affecting covered defense information and cooperation with any subsequent investigation or remediation efforts. All activities must be performed at the designated place of performance in Oak Harbor, WA, with the work being conducted under a subcontract arrangement for the ASC Commodities Division, a component of the Department of Defense. The solicitation is open for responses until July 20, 2026, and the NAICS code 541512 indicates this effort falls under the category of custom computer programming services, suggesting the need for specialized technical expertise in cybersecurity infrastructure and compliance management.