Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation of NIST SP 800-171 controls and compliance with DFARS 252.204-7012 to safeguard Covered Defense Information, ensuring that all necessary cybersecurity measures are applied to protect sensitive data handled under the agreement. This includes establishing robust access controls, continuous monitoring, audit logging, incident response capabilities, and system integrity protections as stipulated by federal cybersecurity standards for defense contractors. All subcontractors must demonstrate full adherence to these requirements and be prepared to report any cyber incidents affecting Covered Defense Information in accordance with mandatory reporting timelines and procedures. The subcontract is issued under the Department of Defense, specifically by the Naval Supply Systems Command Fleet Logistics Center Puget Sound, and is classified under NAICS code 541611 for management, scientific, and technical consulting services. Proposals must be submitted by July 7, 2026, at 5:00 p.m., with performance expected to fulfill all cybersecurity obligations at the location associated with the contract. Compliance is non-negotiable and failure to meet these requirements could result in termination of the agreement or liability for breaches involving federal defense information.