Cybersecurity Compliance and Incident Reporting

The contract requires full implementation of NIST SP 800-171 cybersecurity controls to safeguard covered defense information, ensuring alignment with Department of Defense standards. It mandates immediate reporting of any cyber incidents through the Defense Industrial Base Cyber Incident Reporting Portal, DIBNet, and the submission of related malware samples to the Defense Cyber Crime Center for analysis. Additionally, the contractor must preserve complete system images of all affected systems for a minimum of 90 days following an incident to support forensic investigations and compliance audits. These requirements are essential to meet the obligations outlined in DFARS 252.204-7012, which governs the protection of controlled unclassified information in nonfederal systems. This is a small business set-aside subcontract under the NAICS code 541512, classified as a Total Small Business Set-Aside, reserved exclusively for small business concerns. The solicitation was posted on July 24, 2026, with a response deadline of August 9, 2026. Performance is to be carried out at Robins Air Force Base, Georgia, with no specified point of contact. The contract falls under the purview of the Maritime Supply Chain organization within the Department of Defense and is accessible through the DIBBS procurement portal for further details.