Cybersecurity Compliance and Reporting

The contract requires the implementation and ongoing maintenance of cybersecurity controls in accordance with NIST SP 800-171 to safeguard covered defense information, as mandated by DFARS clauses. This includes establishing appropriate technical, administrative, and physical safeguards to ensure the confidentiality, integrity, and availability of sensitive data handled under the agreement. The contractor must also establish processes for timely cyber incident reporting in accordance with federal requirements and undergo annual assessments to validate compliance with all applicable cybersecurity standards. This subcontract is designated as a Total Small Business Set-Aside under SBA guidelines, exclusively available to small businesses meeting the NAICS code 541512 for computer systems design services. The procurement is managed by the Department of Defense under the Maritime Supply Chain organization, with a response deadline of August 14, 2026, and a posting date of July 30, 2026. The place of performance is unspecified, and the contract emphasizes continuous compliance, meaning ongoing monitoring, documentation, and readiness for audit beyond the initial implementation phase.