Cybersecurity Compliance & Reporting

The contract requires the implementation and maintenance of NIST SP 800-171 security controls to protect covered defense information, ensuring compliance with Department of Defense cybersecurity standards. All subcontractors must establish and sustain the necessary technical and procedural safeguards to prevent unauthorized access, disclosure, or loss of sensitive data, and are obligated to report any cyber incidents promptly in accordance with DFARS requirements. This includes detecting, documenting, and notifying the government of security breaches or anomalous activities that may compromise the integrity, confidentiality, or availability of covered defense information. This is a total small business set-aside subcontract under NAICS code 541512, exclusively available to small businesses as defined by the SBA. The solicitation was posted on June 17, 2026, with a response deadline of June 25, 2026, and is managed by DLA Maritime - Pearl Harbor under the Department of Defense. Performance is expected to support defense operations, though the specific location of performance is not designated. The contract emphasizes full adherence to federal cybersecurity regulations and places responsibility on the prime contractor and subcontractor to maintain continuous compliance and incident reporting capabilities throughout the agreement's lifecycle.