Cybersecurity Compliance and Incident Reporting Support

The contract requires ongoing support to ensure full compliance with DFARS 252.204-7012, focusing on the implementation and maintenance of NIST SP 800-171 security controls to protect covered contractor information systems. This includes safeguarding federal contract information and controlled unclassified information through technical, administrative, and physical measures, as well as establishing robust processes for detecting, reporting, and responding to cyber incidents involving DoD information. Contractors must be prepared to rapidly report any cybersecurity incidents to the Department of Defense within 72 hours of discovery and provide detailed forensic data upon request, ensuring alignment with DoD’s cyber incident reporting framework. The work is performed at Cherry Point, North Carolina, 28533-5040, under a subcontract classified under NAICS code 541512 for computer systems design services. The opportunity is open for responses until July 31, 2026, with a posting date of July 23, 2026. The contract is managed by the Department of Defense through the ASC Supplier Oper AE and AF Div, and must be executed in full accordance with all applicable federal cybersecurity standards without deviation. Compliance is non-negotiable, and failure to meet reporting or safeguarding obligations may result in contract termination or penalties.