Cybersecurity Compliance and Reporting for Subcontractors

This contract focuses on the implementation and ongoing maintenance of cybersecurity measures in accordance with NIST SP 800-171 standards for subcontractors managing covered defense information related to DPV systems. It requires the establishment of security controls, cyber incident reporting mechanisms, and ensuring compliance readiness to protect sensitive defense data throughout the subcontractor network. The contract is a total small business set-aside under FAR 19.5 and falls within the NAICS code 541512, which pertains to computer systems design services. Issued by the Naval Surface Warfare Center under the Department of Defense, the work will be performed primarily in Panama City Beach. Responses to the solicitation are due by May 26, 2026, following its posting on May 19, 2026. This subcontract opportunity serves to enhance cybersecurity posture and compliance among subcontractors, ensuring the integrity and security of defense-related information systems.