Cybersecurity Compliance and Incident Reporting

The contract requires the implementation of NIST Special Publication 800-171 controls and compliance with DFARS 252.204-7012 to safeguard covered defense information and ensure timely reporting of cyber incidents. This subcontract is focused on establishing and maintaining a robust cybersecurity framework that aligns with Department of Defense standards for protecting sensitive information handled by contractors within the maritime supply chain. All systems and processes must be assessed and hardened to meet the specified security requirements, with emphasis on data confidentiality, integrity, and availability, as well as the ability to detect, respond to, and report cyber threats in accordance with federal regulations. Performance of this contract is mandated at Camp Lejeune, North Carolina, 28542-0127, and the work must be completed by the response deadline of July 23, 2026. The North American Industry Classification System code 541512 indicates that the subcontractor is expected to provide computer systems design and related services, with a strong focus on cybersecurity implementation and incident response capabilities. The solicitation is issued under the Maritime Supply Chain organization within the Department of Defense, and the contractor must be prepared to demonstrate full compliance with all technical, procedural, and reporting obligations tied to the protection of covered defense information.