Cybersecurity Compliance for Contractor Systems

The contract requires implementation and maintenance of NIST SP 800-171 security controls to protect covered defense information on contractor systems, in full compliance with DFARS 252.204-7012. This includes establishing robust cybersecurity measures to safeguard sensitive data, ensuring all systems handling such information meet federal standards, and establishing processes for timely reporting of any cyber incidents that compromise the confidentiality, integrity, or availability of covered defense information. The contractor must maintain ongoing adherence to these requirements throughout the contract period and be prepared to demonstrate compliance through audits or assessments. This subcontract is issued under NAICS code 541512 by the ASC Commodities Division of the Department of Defense, with performance located at Cherry Point, North Carolina, ZIP 28533-0021. The solicitation was posted on July 16, 2026, and responses are due by July 24, 2026. All work must be performed in alignment with the specified cybersecurity framework, and failure to comply with NIST SP 800-171 controls or incident reporting obligations may result in contract penalties or termination. Contractors must ensure their systems, personnel, and procedures are fully capable of meeting these stringent defense cybersecurity mandates.