Cybersecurity Compliance for Covered Defense Information

The contract requires implementation of NIST SP 800-171 cybersecurity safeguards to protect covered defense information on systems operated by the contractor, aligning with the requirements of DFARS 252.204-7012. This includes establishing and maintaining a range of technical, administrative, and physical controls designed to secure sensitive information, ensure proper access management, and safeguard data integrity and availability. The contractor must also establish and sustain a capability for cyber incident reporting, ensuring timely notification and coordination with appropriate federal authorities in the event of a breach or security compromise involving covered defense information. Compliance with these standards is mandatory and will be subject to verification and ongoing monitoring throughout the performance period. The work is classified as a subcontract under the Department of Defense’s Maritime Supply Chain ESOC Buys division, with the place of performance located in San Diego, California, at ZIP code 92113-3650. The NAICS code 541512 indicates the nature of the service as computer systems design and related services. The solicitation was posted on July 21, 2026, with responses due by August 3, 2026, and the opportunity is accessible via the DIBBS portal. While no specific set-aside status or point of contact is provided, participation requires demonstrated experience in cybersecurity compliance, incident response readiness, and prior adherence to federal information security standards for defense contractors.