Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation of NIST Special Publication 800-171 controls to ensure the protection of controlled unclassified information handled by the contractor, with a specific focus on meeting cybersecurity requirements for covered defense information. This includes establishing and maintaining a secure environment that complies with all applicable technical, administrative, and physical safeguards outlined in the NIST framework, as well as establishing processes for timely and accurate cyber incident reporting in accordance with federal guidelines. The work is to be performed at the designated location in Norfolk, Virginia, and the contract is structured as a subcontract under the Department of Defense, specifically managed by the Land Supply Chain organization. The solicitation is open for responses until July 27, 2026, with a posted date of July 14, 2026, and falls under the NAICS code 541512 for computer systems design services. Contractors must demonstrate capability to meet the stringent cybersecurity standards required for handling sensitive government information and be prepared to undergo assessments to validate compliance. All performance activities are tied to DoD requirements and must align with the operational needs of the agency, ensuring continuous protection of information systems and data integrity throughout the contract lifecycle.