Cybersecurity Compliance and Reporting (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information within the maritime supply chain environment. This includes establishing robust cyber defenses aligned with federal standards, ensuring continuous compliance, and preparing for potential Department of Defense assessments to validate adherence. The contractor must also be prepared to report any cyber incidents promptly and accurately, maintaining full transparency and readiness for audit or evaluation by DoD authorities. Performance is centered at Tracy, California, with the work falling under NAICS code 541512 for computer systems design services. The subcontract is set to close for responses on August 3, 2026, following its posting on July 23, 2026. While no set-aside classification is specified, the obligation is tied directly to DoD requirements and must be executed in strict accordance with NIST guidelines to ensure protection of sensitive defense data throughout the supply chain.