Cybersecurity Compliance and Reporting

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls for systems that handle Covered Defense Information, ensuring compliance with federal cybersecurity standards for protected data. It also mandates timely cyber incident reporting through the Defense Industrial Base Cybersecurity and Supply Chain Risk Management (DIBNet) portal, establishing a clear protocol for identifying, documenting, and transmitting security breaches to the appropriate authorities. Additionally, the contract obligates the provision of regular, comprehensive training for all personnel involved with these systems, reinforcing awareness of security policies, incident response procedures, and the proper handling of sensitive defense information. This is a subcontract under the Department of Defense, aligned with NAICS code 541512 for Computer Systems Design Services, and is posted under the Maritime Supply Chain ESOC Buys division. The solicitation opens on May 8, 2026, with a response deadline of June 8, 2026. Performance location details are unspecified, but the work must be conducted in support of systems containing Covered Defense Information. While no set-aside type is indicated, the subcontractor must be prepared to meet all DoD cybersecurity obligations without reliance on external documentation or third-party guidance beyond the stipulated requirements.