Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information, ensuring compliance with federal cybersecurity standards for contractors handling sensitive government data. All systems and processes must be configured to meet the full suite of controls outlined in the NIST publication, covering areas such as access control, audit, configuration management, and incident response. In addition to maintaining these protections, the contractor is obligated to report any cyber incidents involving covered defense information within 72 hours of discovery, with full cooperation in investigations and remediation efforts. This is a subcontract under the Department of Defense’s Maritime Supply Chain initiative, with performance expected to take place at an FPO address identified by the zip code 96675. The North American Industry Classification System code 541512 indicates the work falls under computer systems design and related services. The solicitation was posted on July 29, 2026, and responses must be submitted by August 10, 2026. While no specific set-aside designation is provided, the contract is managed through the DLA DIBBS platform, and strict adherence to the timeline and cybersecurity requirements is mandatory for award consideration.