Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 19 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

Cybersecurity Compliance for Controlled Data

Active

Federal

Response Deadline08/20/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information in accordance with DFARS 252.204-7012, ensuring compliance with federal cybersecurity standards for handling sensitive government data. The work is scoped as a subcontract under a Total Small Business Set-Aside, meaning only small business concerns are eligible to bid, and it is classified under NAICS code 541512 for computer systems design services. The performance location is designated as New Cumberland, PA, with a zip code of 17070-5002, and all activities must adhere strictly to the NIST framework to safeguard controlled unclassified information. The solicitation was posted on August 9, 2026, and responses are due by August 20, 2026, with the award to be managed by the Department of Defense under the Maritime Supply Chain office.

General Info

Implement NIST SP 800-171 controls for defense data in New Cumberland, PA, under small business set-aside.

Agency

Department Of Defense → MARITIME SUPPLY CHAINView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

NEW CUMBERLAND, PA, 17070-5002, US

Set-Aside

SBA

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedAug 9

subcontract

Response DeadlineAug 20

Submission deadline

Response Deadline

08/20/2026, 05:00:00 PM UTCin 11 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → MARITIME SUPPLY CHAIN

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → MARITIME SUPPLY CHAIN

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Implementation and maintenance of NIST SP 800-171 controls to safeguard covered defense information per DFARS 252.204-7012.

Similar Contracts

Same NAICS industry code

Cybersecurity Compliance (CMMC Level 2 & NIST SP 800-171)The contract requires the implementation and maintenance of robust cybersecurity controls to protect covered defense information in full alignment with CMMC Level 2, NIST SP 800-171, and DFARS regulatory standards. This effort is critical to ensuring the confidentiality, integrity, and availability of sensitive data handled under the subcontract, with compliance being non-negotiable and subject to verification. All security practices must be systematically documented, monitored, and continuously improved to meet the rigorous requirements set forth by the Department of Defense. This subcontract is positioned under NAICS code 541512, indicating it relates to computer systems design services, and is tied to a performance location in Tracy, California, with a zip code of 95304-5000. The procurement was posted on August 9, 2026, with responses due by August 20, 2026. It falls under the purview of the Department of Defense, specifically managed by the Construction & Equipment MRO SVC I organization, and is issued through the DIBBS system. While no set-aside designation is specified, the contractor must be prepared to demonstrate full adherence to all federal cybersecurity mandates without deviation.

CONSTRUCTION & EQUIPMENT MRO SVC I

POSTED

about 7 hours ago

DEADLINE

Cybersecurity Compliance (NIST SP 800-171)The contract requires the implementation and documentation of NIST SP 800-171 cybersecurity controls to safeguard Covered Defense Information within contractor systems that handle classified or sensitive contract data. This effort is mandatory for ensuring compliance with federal cybersecurity standards applicable to defense contractors and involves a full assessment and record-keeping of all required security controls across systems processing protected information. The work must be completed in alignment with the NIST framework and demonstrated through formal documentation to meet contractual obligations. The contract is classified as a subcontract under the NAICS code 541512, associated with computer systems design services, and is issued by the ASC Commodities Division of the Department of Defense with performance required in Tracy, California, 95304-5000. The solicitation was posted on August 9, 2026, with a response deadline of August 17, 2026, indicating a tight turnaround for submission. Although no set-aside type is specified, the contract is governed by DoD cybersecurity regulations and demands strict adherence to NIST guidelines to protect national defense information, making compliance non-negotiable for award consideration.

ASC COMMODITIES DIVISION

POSTED

about 7 hours ago

DEADLINE

Cybersecurity Compliance & NIST 800-171 Assessment

ASC SUPPLIER OPER AE AND AF DIV

POSTED

about 7 hours ago

DEADLINE

Cybersecurity and CMMC Assessment SupportThe contract seeks to provide specialized support to a prime contractor in achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance, specifically focused on the safeguarding of Controlled Unclassified Information (CUI). The effort involves assisting the prime contractor with implementing required security controls, conducting gap assessments, preparing documentation, and ensuring adherence to CMMC framework standards to meet Department of Defense cybersecurity requirements. The work is aligned with NAICS code 541512, indicating it falls under computer systems design and related services, and is structured as a subcontract to support broader defense contracting obligations. This subcontract is tied to performance at Hill Air Force Base with ZIP code 84056-5734 and was posted on August 9, 2026, with a response deadline of August 17, 2026. The acquiring agency is the Department of Defense, specifically under the ASC SUPPLIER OPER AE AND AF DIV, indicating this effort is part of a broader defense supply chain modernization and cybersecurity enhancement initiative. The subcontractor must possess demonstrated expertise in CMMC Level 2 implementation, knowledge of NIST SP 800-171 controls, and experience working within defense contracting environments to ensure the prime contractor meets all assessment and certification prerequisites within the established timeline.

ASC SUPPLIER OPER AE AND AF DIV

POSTED

about 7 hours ago

DEADLINE

Covered Defense Information (CDI) SafeguardingThe contract requires implementation and maintenance of NIST SP 800-171 cybersecurity controls across systems handling Covered Defense Information, ensuring compliance with Department of Defense standards for protecting sensitive unclassified data. This includes developing and maintaining a System Security Plan that documents all implemented controls, procedures, and organizational responsibilities, as well as preparing for and sustaining readiness for official DOD assessments to validate compliance. The work must be performed at the designated location in New Cumberland, Pennsylvania, with a strict deadline for response by August 20, 2026, and the solicitation was posted on August 9, 2026. The NAICS code 541512 indicates the work relates to computer systems design services, aligning with the technical scope of cybersecurity implementation. This is a subcontract opportunity under the Department of Defense’s Construction & Equipment MRO SVC I contract vehicle, emphasizing the need for qualified vendors to support defense infrastructure with secure information handling practices.

CONSTRUCTION & EQUIPMENT MRO SVC I

POSTED

about 7 hours ago

DEADLINE

Cybersecurity Compliance for Covered Defense Information (CDI)This contract requires the implementation of NIST Special Publication 800-171 controls and full compliance with DFARS clause 252.204-7012 to protect covered defense information handled during performance. The subcontractor must establish and maintain a secure environment that meets federal requirements for safeguarding sensitive defense data, including implementing appropriate access controls, audit logging, incident reporting, and system integrity measures. Compliance is mandatory for all systems and processes handling covered defense information, with failure to meet requirements potentially resulting in contract termination or penalties. The contract falls under NAICS code 541512 for computer systems design services and is associated with the Department of Defense’s Land Supply Chain organization. Performance is to take place at Fort Bliss, TX 79918-0000, and the agreement is structured as a subcontract. The solicitation was posted on August 9, 2026, with responses due by August 20, 2026. The contractor is expected to demonstrate operational readiness and ongoing adherence to cybersecurity standards throughout the contract period, ensuring that all technical, administrative, and physical safeguards prescribed by NIST and DFARS are fully integrated and auditable.

LAND SUPPLY CHAIN

POSTED

about 7 hours ago

DEADLINE

Cybersecurity Compliance for Covered Defense Information (CUI)The contract requires the implementation of NIST SP 800-171 security controls to protect Covered Unclassified Information (CUI) and ensure compliance with DFARS 252.204-7012, which governs the safeguarding of controlled unclassified information in nonfederal systems. This subcontract is centered on establishing and maintaining a robust cybersecurity posture that meets federal standards for handling sensitive defense-related data, including proper access controls, audit logging, malware protection, configuration management, and incident response procedures. The contractor must be prepared to report any cyber incidents involving CUI in accordance with the mandated reporting timeline and procedures outlined in the DFARS clause. The contract is associated with the Department of Defense and will be performed at a location in Jacksonville, Florida, with a North American Industry Classification System code of 541512 indicating information technology services. The solicitation was posted on August 9, 2026, and responses are due by August 20, 2026. This subcontract does not specify any set-aside status and is part of a broader effort to enforce cyber resilience across the defense industrial base. Compliance is not optional; failure to implement the required controls or report incidents properly may result in contract termination or penalties.

JACKSONVILLE BLDG

POSTED

about 7 hours ago

DEADLINE

Cybersecurity for Covered Defense Information (CDI)

MEDICAL SUPPLY CHAIN MD SURG FSF

POSTED

about 7 hours ago

DEADLINE

CMMC Level 2 Cybersecurity ComplianceThe contract requires the implementation and ongoing maintenance of Cybersecurity Maturity Model Certification (CMMC) Level 2 controls across systems handling Covered Defense Information (CDI). This includes executing a full compliance assessment and achieving certification through a Certified Third-Party Assessment Organization (C3PAO) to ensure alignment with Department of Defense cybersecurity standards. The work must be performed at the designated place of performance in New Cumberland, Pennsylvania, with a response deadline for proposals set for August 20, 2026. The contract is classified as a subcontract under NAICS code 541512, indicating it falls within the category of Custom Computer Programming Services, and is issued by the Active Devices Division of the Department of Defense. Compliance with CMMC Level 2 requirements is mandatory, encompassing both technical and organizational safeguards to protect sensitive defense data throughout the system lifecycle.

ACTIVE DEVICES DIVISION

POSTED

about 7 hours ago

DEADLINE

Cybersecurity Compliance for Controlled Unclassified Information

ACTIVE DEVICES DIVISION

POSTED

about 7 hours ago

DEADLINE

Cybersecurity and CUI SafeguardingThe contract entails the implementation and ongoing maintenance of comprehensive cybersecurity controls to ensure compliance with CMMC Level 2 and NIST SP 800-171 standards for systems handling controlled unclassified information. The work is focused on safeguarding CUI within the operational environment at Robins Air Force Base, Georgia, under the Department of Defense’s Warner Robins organization. The contractor must establish, validate, and sustain a robust security posture that aligns with federal requirements, addressing technical, administrative, and physical controls necessary to protect sensitive data from unauthorized access, disclosure, or compromise. This is a subcontract opportunity with a NAICS code of 541512, indicating it pertains to computer systems design services. The solicitation was posted on August 9, 2026, with responses due by August 20, 2026, providing a tight window for qualified entities to submit proposals. Performance must be executed at the specified location in Robins AFB, and the contractor is expected to demonstrate proven experience in delivering CMMC and NIST compliance solutions, including documentation, auditing, and continuous monitoring capabilities. The absence of a set-aside designation means the opportunity is open to all eligible small and large businesses, with evaluation likely centered on technical capability, past performance, and compliance readiness.

POSTED

about 7 hours ago

DEADLINE

Cybersecurity and Covered Defense Information SafeguardingThe contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information held by the contractor, ensuring compliance with Department of Defense cybersecurity standards. The scope includes establishing robust protective measures for CDI and fulfilling mandatory cyber incident reporting obligations as stipulated under DoD contractual requirements, with an emphasis on timely detection, response, and notification of security breaches. All activities must align with the technical and procedural expectations outlined in NIST SP 800-171 to ensure the integrity, confidentiality, and availability of sensitive defense data. This is a small business set-aside subcontract under NAICS code 541512, issued by the Maritime Supply Chain organization within the Department of Defense. The solicitation was posted on August 9, 2026, with proposals due by August 24, 2026, targeting small businesses exclusively as part of a total small business set-aside. The place of performance and contact details are not specified, but performance is expected to support DoD contract obligations regardless of location. Compliance with these cybersecurity requirements is critical for contract award and continued performance, and failure to meet NIST SP 800-171 standards may result in penalty, termination, or loss of eligibility for future DoD work.

MARITIME SUPPLY CHAIN

POSTED

about 7 hours ago

DEADLINE

More opportunities from Department Of Defense → MARITIME SUPPLY CHAIN

Same awarding agency

Hazardous Materials Compliance and SDS ManagementThe contract requires identification of hazardous materials used in manufacturing or packaging processes, along with the preparation and ongoing maintenance of Safety Data Sheets to ensure accurate and up-to-date chemical safety information. Compliance with federal hazard communication standards and Department of Defense Logistics Agency regulations is mandatory, requiring strict adherence to reporting, labeling, and documentation protocols. The work involves collaboration with production and safety teams to assess risks, update SDS documentation as needed, and implement corrective actions to meet regulatory requirements. This is a subcontract set aside entirely for small businesses under the SBA's Total Small Business Set-Aside provision, classified under NAICS code 541620 for environmental consulting services. The solicitation was posted on August 9, 2026, with responses due by August 24, 2026, and the work is being managed by the Maritime Supply Chain organization under the Department of Defense. Performance location details are unspecified, but the contractor must be prepared to support operations aligned with DLA’s hazard communication framework, ensuring all hazardous materials are properly documented and handled in accordance with applicable laws and departmental policies.

Environmental Consulting Services

POSTED

about 7 hours ago

DEADLINE

Packaging and Labeling Services for Defense SuppliesThe contract requires the provision of military-compliant packaging, preservation, and labeling services for electrical connectors in accordance with Department of Defense and Defense Logistics Agency standards, with all shipments destined for Continental United States locations. Work must strictly adhere to military specifications to ensure the integrity, protection, and traceability of components throughout transit and storage, with emphasis on environmental and handling requirements defined by federal defense protocols. Performance is expected to meet rigorous quality assurance benchmarks to support military readiness and logistical efficiency. This is a small business total set-aside subcontract under NAICS code 493190, exclusively available to small businesses as defined by the Small Business Administration, and is issued by the Maritime Supply Chain organization within the Department of Defense. The solicitation was posted on August 9, 2026, with a firm response deadline of August 24, 2026, and the work will be performed at locations determined by the government, though the precise place of performance is not specified. Interested parties must respond through the DIBBS portal to be considered for award.

Other Warehousing and Storage

POSTED

about 7 hours ago

DEADLINE

Supply of Electrical Connectors (Receptacle Type)The contract entails the manufacture and delivery of electrical receptacle connectors identified by NSN 5935015765177 under an IDIQ framework, with all shipments FOB origin to locations within the contiguous United States. This is a subcontract awarded through a Total Small Business Set-Aside, designated under FAR 19.5, ensuring exclusive eligibility for small businesses as defined by the SBA. The North American Industry Classification System code 334417 applies, reflecting the specialized nature of the work within the electrical component manufacturing sector. The solicitation was posted on August 9, 2026, with responses due by August 24, 2026, and the awarding agency is the Maritime Supply Chain under the Department of Defense. All performance and delivery obligations are tied to domestic U.S. destinations, and the contract is managed through the DLA’s DIBBS platform for procurement transparency and tracking.

Electronic Connector Manufacturing

POSTED

about 7 hours ago

DEADLINE

Supplier for REDUCER, BOSS (NSN: 4730006846913)

Fabricated Pipe and Pipe Fitting Manufacturing

POSTED

about 7 hours ago

DEADLINE

Calibration System MaintenanceThe contract pertains to the maintenance of an ANSI-compliant calibration system for measurement and test equipment utilized in production and quality control environments. It requires ongoing support to ensure all instrumentation remains accurately calibrated in accordance with American National Standards Institute requirements, thereby guaranteeing the reliability and traceability of measurements critical to operational integrity. The work is specifically tied to equipment used within defense-related manufacturing or inspection processes, necessitating strict adherence to technical specifications and documentation standards. This subcontract is solicited under NAICS code 541380, indicating it falls within the category of calibration services. The place of performance is designated as Fort Eustis, Virginia with a zip code of 23604-0000, and the solicitation is managed by the Department of Defense under the Maritime Supply Chain organizational unit. The response deadline is August 20, 2026, and the posting date was August 9, 2026, providing a full eleven-day window for interested parties to submit proposals. The contract is accessible through the DIBBS platform under solicitation number SPE7M126T268B, and while no set-aside designation or point of contact is listed, bidders must be prepared to meet federal compliance requirements applicable to defense subcontracting.

Testing Laboratories and Services

POSTED

about 7 hours ago

DEADLINE

Packaging, Preservation & Palletization ServicesThe contract titled Packaging, Preservation & Palletization Services requires full compliance with DLA and military standards for the proper packaging, preservation using Method 31, palletization, and labeling of all items. Work must be performed to ensure items are protected, organized, and marked appropriately for military logistics and storage, meeting strict operational and supply chain requirements. The place of performance is specified as Fort Eustis, Virginia, with a zip code of 23604-0000, indicating the physical location where services must be delivered. The contract is classified as a subcontract under NAICS code 561910, which corresponds to Other Support Activities for Transportation, and is administered by the Maritime Supply Chain under the Department of Defense. The solicitation was posted on August 9, 2026, and responses are due by August 20, 2026, with no set-aside designation applicable. The full details are accessible via the provided DIBBS link for interested contractors.

Packaging and Labeling Services

POSTED

about 7 hours ago

DEADLINE

Ozone-Depleting Chemicals Substitution ManagementThe contract mandates the strict prohibition of Class I ozone-depleting chemicals and requires the systematic identification, submission, and approval coordination of compliant chemical substitutes to ensure environmental compliance. All parties must adhere to established protocols for replacing prohibited substances with approved alternatives, with documentation and verification processes integrated into daily operations to maintain regulatory alignment. This subcontract, issued under NAICS code 541670 by the Department of Defense through the Maritime Supply Chain agency, is performance-based and centered at Fort Eustis, Virginia, with a response deadline of August 20, 2026. The scope emphasizes technical coordination and compliance oversight rather than procurement, requiring entities to demonstrate technical capability in chemical substitution management and regulatory adherence. No set-aside designation applies, and participation is open to qualified subcontractors capable of meeting the environmental and procedural requirements outlined.

POSTED

about 7 hours ago

DEADLINE

Radioactive Materials Notification & Labeling (If Applicable)The contract requires the identification, government notification, and proper labeling of any items that contain radioactive materials exceeding established regulatory thresholds. This work is tied to subcontracting obligations under the Department of Defense's Maritime Supply Chain and must be performed at Fort Eustis with a zip code of 23604-0000. The task is governed under NAICS code 541620, which pertains to management consulting services, indicating the need for specialized expertise in compliance and regulatory coordination. All necessary steps must be completed to ensure full adherence to federal safety and reporting standards for radioactive substances, with accountability for accurate documentation and clear marking of affected items. The solicitation was posted on August 9, 2026, and responses are due by August 20, 2026, providing a brief window for qualified subcontractors to submit proposals. Participation in this effort is mandatory for any entity handling radioactive materials within the scope of the supply chain, and failure to comply could result in rejected deliverables or regulatory penalties. The government expects immediate and precise action upon detection of regulated radioactive content, including timely notification to relevant authorities and verification of labeling that meets national and international requirements. While specific contact details are not provided, all communications and submissions must be directed through the designated DIBBS portal linked in the contract data.

Environmental Consulting Services

POSTED

about 7 hours ago

DEADLINE

Hazardous Materials Compliance & Labeling ServicesThe contract titled Hazardous Materials Compliance & Labeling Services requires the preparation and submission of fully compliant hazard communication materials, including accurate labels and Material Safety Data Sheets for all hazardous items under the Department of Defense's Maritime Supply Chain. The work is to be performed at Fort Eustis, Virginia, with a firm deadline for submission on August 20, 2026, following a posting date of August 9, 2026. This is classified as a subcontract under NAICS code 541690, which pertains to other scientific and technical consulting services, and is not subject to any specific set-aside provisions. All deliverables must align with federal hazard communication standards to ensure regulatory compliance across the supply chain.

Other Scientific and Technical Consulting Services

POSTED

about 7 hours ago

DEADLINE

Check Valve (Ball Type) SupplyThe contract calls for the procurement and delivery of two ball-type check valves identified by NSN 4820014165951, requiring full compliance with military packaging and labeling standards to ensure readiness for defense logistics. The items are intended for deployment under the Department of Defense’s Maritime Supply Chain, with performance taking place at Fort Eustis, Virginia, indicating direct use by military operations or support units. The solicitation is classified as a subcontract and was posted on August 9, 2026, with responses due by August 20, 2026, providing a narrow window for qualified suppliers to submit bids. The NAICS code 332912 specifies the industrial category as Other Fabricated Metal Product Manufacturing, underscoring the technical precision required in manufacturing. All deliveries must meet strict defense specifications for packaging and documentation, and the contract is accessible via the DIBBS platform under reference number SPE7M126T268B.

Fluid Power Valve and Hose Fitting Manufacturing

POSTED

about 7 hours ago

DEADLINE

Ocean Transportation via U.S.-Flag VesselThe contract requires the transportation of a deflector unit from the United States to FPO 96632 using a U.S.-flagged vessel, strictly adhering to the provisions of Clause 252.247-7000, which mandates the use of American-flagged shipping for certain government-related cargo. A waiver to this requirement is permitted but only if explicitly approved by the government authority. The solicitation is categorized as a subcontract under NAICS code 483111, indicating it falls within the ocean transport services sector. It was posted on August 9, 2026, with a response deadline of August 20, 2026, and is managed by the Department of Defense through its Maritime Supply Chain division. The performance location is designated as FPO 96632, a military mail destination typically used for overseas deployments, emphasizing the operational and logistical nature of this transport task.

Deep Sea Freight Transportation

POSTED

about 7 hours ago

DEADLINE