Cybersecurity Compliance and Incident Reporting

The contract requires implementation of NIST Special Publication 800-171 security controls on systems that process, store, or transmit covered defense information, ensuring compliance with federal cybersecurity standards for protecting sensitive data within the defense industrial base. The contractor must establish, maintain, and continuously monitor these controls to mitigate risks and safeguard information systems against unauthorized access, disclosure, or compromise, aligning with Department of Defense requirements for handling sensitive but unclassified information. Additionally, the contractor is responsible for managing cyber incident reporting procedures, including timely detection, documentation, and reporting of any security breaches or anomalies to the appropriate government authorities in accordance with mandated timelines and protocols. The work is performed at a designated location in Keyport, Washington, under a subcontract arrangement linked to the Department of Defense, and must be executed by a firm compliant with NAICS code 541512, which pertains to computer systems design services. Proposals must be submitted prior to the response deadline of August 10, 2026, to meet contractual obligations and ensure continued eligibility for defense-related cyber operations.