Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information processed, stored, or transmitted on contractor systems. Compliance with these controls is mandatory and must be documented and sustained throughout the period of performance, ensuring all applicable safeguarding requirements are met in alignment with federal cybersecurity standards. Additionally, the contractor must establish and follow procedures to promptly report any cyber incidents involving covered defense information as stipulated under DFARS 252.204-7012, including timely notification and cooperation in incident response activities. The work is scoped to support systems operating at Mayport Naval Station, Florida, and falls under NAICS code 541512, indicating it pertains to computer systems design services. This is a subcontract opportunity issued by the Fluid Handling Division within the Department of Defense, with a response deadline of August 13, 2026. Performance must align with the defense supply chain’s cybersecurity obligations, and the contractor is expected to demonstrate the capability to meet all regulatory, technical, and reporting requirements without reliance on external documentation beyond what is mandated by federal regulation.