Cybersecurity Compliance and Incident Reporting

The contract requires full implementation of NIST SP 800-171 controls to protect covered defense information and ensure compliance with DFARS 252.204-7012, including mandatory system monitoring and timely reporting of cyber incidents. All security measures must be in place to safeguard sensitive data, and any breach or suspicious activity must be detected, documented, and reported in accordance with federal cybersecurity standards. The contractor is responsible for maintaining operational readiness and demonstrating continuous adherence to these requirements throughout the performance period. This is a small business set-aside subcontract under NAICS code 541512, issued by the Department of Defense’s Active Devices Division with performance to be conducted at Cherry Point, North Carolina, 28533-5040. The solicitation was posted on July 23, 2026, and responses are due by August 3, 2026. The contract emphasizes strict compliance with federal cybersecurity frameworks and expects the winning vendor to operate with high levels of accountability, precision in incident response, and alignment with DoD cybersecurity policy.