Cybersecurity Compliance for Controlled Technical Data

The contract requires implementation of NIST SP 800-171 controls to safeguard covered contractor information systems that process, store, or transmit controlled technical data, including drawings, test reports, and quality certifications. Compliance with these cybersecurity standards is mandatory to ensure the protection of sensitive information in alignment with federal requirements for contractors handling such data under Department of Defense obligations. The scope focuses on establishing and maintaining robust security measures across all relevant systems to mitigate risks associated with unauthorized access, disclosure, or compromise of controlled technical information. This subcontract is open for response until August 10, 2026, with the solicitation posted on July 28, 2026, under NAICS code 541512 for computer systems design services. The contracting activity is led by the Maritime Supply Chain ESOC Buys division within the Department of Defense. The place of performance and point of contact details are not specified, and there is no set-asides designation for small or disadvantaged businesses. Interested parties must access the solicitation via the provided DIBBS link to submit proposals and confirm adherence to all NIST SP 800-171 compliance requirements prior to award.