Cybersecurity Compliance and Reporting Services

The contract requires the implementation and ongoing monitoring of cybersecurity controls aligned with NIST SP 800-171 to ensure compliance with DFARS 252.204-7012, focusing on the protection of controlled unclassified information within covered contractor information systems. All cybersecurity incidents must be reported to the appropriate government authority within 72 hours of discovery, with full documentation and response actions documented to maintain regulatory adherence and operational integrity. The scope includes continuous assessment of controls, remediation of identified gaps, and sustained reporting mechanisms to meet federal cybersecurity requirements. This is a subcontract solicited by the Department of Defense under the Maritime Supply Chain office, with performance required at New Cumberland, Pennsylvania, 17070-5002. The solicitation falls under NAICS code 541512 for computer systems design services and is open for responses until August 3, 2026. The work involves both technical implementation and procedural accountability, demanding a structured approach to cybersecurity governance, incident response, and documentation to satisfy government compliance obligations without exception.