Cybersecurity Compliance and Reporting

This contract requires the implementation of NIST SP 800-171 cybersecurity controls to protect controlled unclassified information within the subcontractor’s systems, in full alignment with Defense Federal Acquisition Regulation Supplement (DFARS) requirements. The contractor must establish, maintain, and continuously monitor compliance with all applicable NIST controls and promptly report any cyber incidents affecting covered defense information or systems, ensuring timely notification and remediation as mandated by federal guidelines. The performance is tied to Hill Air Force Base with a ZIP code of 84056-5734, and all activities must adhere to the strict reporting and documentation protocols established by the Department of Defense. The solicitation is designated as a Total Small Business Set-Aside under SBA regulations, meaning only small businesses qualify to respond, reinforcing the intent to support small businesses within the defense cybersecurity industry. It falls under NAICS code 541611 for Management, Scientific, and Technical Consulting Services, indicating the work involves advisory and implementation expertise rather than hardware or infrastructure procurement. The response deadline is August 3, 2026, with the opportunity posted on July 23, 2026, offering a narrow window for qualified entities to submit proposals. The contract is structured as a subcontract, suggesting the winning entity will support a prime contractor delivering cybersecurity services under the broader Maritime Supply Chain initiative.