Cybersecurity Compliance and Incident Response Support

The contract requires the implementation and ongoing monitoring of NIST Special Publication 800-171 security controls to ensure compliance with federal cybersecurity standards for covered defense information. This includes continuous assessment and documentation of control effectiveness to maintain authorized system status, with a specific focus on protecting controlled unclassified information within the defense industrial base. The contractor must also establish and maintain robust cyber incident reporting procedures through the Defense Industrial Base Cyber Incident Reporting Portal, ensuring prompt and accurate submission of all incident-related data in accordance with regulatory timelines and protocols. Additionally, the contractor is obligated to preserve all forensic artifacts and digital evidence for a minimum of 90 days following any identified cyber incident, enabling thorough investigation, attribution, and remediation efforts by government authorities. This is a total small business set-aside subcontract under NAICS code 541512, awarded by the Department of Defense through the Maritime Supply Chain office, with performance anticipated in New Cumberland, Pennsylvania. The solicitation was posted on August 6, 2026, and responses are due by August 17, 2026. The work is critical to supporting the defense industrial base’s cybersecurity posture, requiring proven experience in NIST 800-171 compliance, incident response workflows, and digital forensics preservation practices under strict government oversight and reporting requirements.