Cybersecurity Compliance and Reporting (NIST SP 800-171)

The contract requires full implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to protect covered defense information on all covered systems. This includes establishing robust technical, administrative, and physical safeguards to ensure the confidentiality, integrity, and availability of sensitive data, as well as continuous monitoring and adaptation to evolving cyber threats. All systems must meet compliance standards without exception, and any security incident must be reported promptly in accordance with established reporting protocols. Additionally, the contractor is responsible for collecting, preserving, and providing forensic data in the event of a cyber incident to support investigation and response efforts. The work is limited to small businesses under a total small business set-aside, with performance required at New Cumberland, PA, 17070-5002. The solicitation is issued under NAICS code 541512 for other computer-related services and is part of a subcontract under the Department of Defense’s Maritime Supply Chain initiative, with proposals due by August 10, 2026.