Cybersecurity Compliance for Covered Defense Information

The contract requires full compliance with DFARS 252.204-7012 to safeguard Covered Defense Information (CDI) and mandates implementation of the security controls outlined in NIST SP 800-171 across all systems handling such information. This includes establishing and maintaining a robust cybersecurity posture to protect CDI from unauthorized access, disclosure, or modification, as well as ensuring timely reporting of any cyber incidents affecting CDI within seven days of discovery. The subcontractor must demonstrate the ability to meet all applicable requirements for information system security, including access control, audit, configuration management, incident response, and risk assessment, in alignment with federal defense standards. Performance is required at the specified location in New Cumberland, PA, with the North American Industry Classification System (NAICS) code 541512 indicating that the work falls under Computer Systems Design and Related Services. The contract is structured as a subcontract under the Department of Defense, managed by the Maritime Supply Chain ESOC Buys organization, and all proposals must be submitted by the deadline of August 20, 2026. Participation requires strict adherence to compliance protocols and documented evidence of NIST SP 800-171 implementation, with no allowances for non-conformance in the handling or protection of defense-related information.