Cybersecurity Compliance and Reporting Services

The contract requires the implementation of NIST SP 800-171 safeguards to protect covered contractor information systems handling controlled unclassified information, in full alignment with DFARS 252.204-7012 requirements. This includes establishing, documenting, and maintaining a comprehensive set of security controls related to access control, audit, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, physical protection, risk assessment, system and communications protection, and system and information integrity. The contractor must also establish and operationalize procedures for timely detection, reporting, and response to cyber incidents affecting these systems, ensuring compliance with the mandated reporting timeline and content requirements under the regulation. The contract is a subcontract under the Department of Defense’s Maritime Supply Chain initiative, with performance duties to be carried out at the facility located in New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation was posted on July 23, 2026, and responses are due no later than July 28, 2026. The work falls under NAICS code 541611, indicating it involves management, scientific, and technical consulting services focused on cybersecurity compliance. The nature of the engagement demands proven expertise in federal cybersecurity frameworks, the ability to conduct gap analyses against NIST controls, and experience in supporting DoD contractor obligations under DFARS, with all deliverables required to be fully traceable, auditable, and demonstrably compliant.