Cybersecurity Compliance for Covered Contractor Systems

The contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard controlled unclassified information (CUI) on covered contractor systems, ensuring full alignment with NIST and DFARS standards. All work must be performed at Fort Wainwright, Alaska, with the contractor responsible for establishing, monitoring, and updating security measures to meet federal cybersecurity requirements, including continuous compliance with NIST SP 800-171 and applicable DFARS clauses. The effort is classified as a subcontract under NAICS code 541512, indicating it relates to computer systems design services, and is managed by the Department of Defense’s Land Supply Chain organization. Proposals must be submitted by July 23, 2026, and the contract is open to eligible subcontractors without specific set-aside restrictions. The place of performance is fixed at Fort Wainwright, and all cybersecurity controls must be operational and auditable in that location. The contractor is expected to demonstrate proven capability in securing CUI environments, maintain documentation of compliance practices, and be prepared for readiness assessments or audits tied to defense contracting obligations. No point of contact is listed, and all inquiries should be directed through the provided DIBBS portal.