Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation and documentation of cybersecurity controls in accordance with NIST SP 800-171 to safeguard covered defense information as mandated by DFARS 252.204-7012. This subcontract is scoped to ensure compliance with federal cybersecurity standards for handling sensitive defense data, necessitating the full adoption of all 110 controls outlined in the NIST publication, including policies, procedures, and technical safeguards across systems and networks. Documentation must be thorough and auditable, demonstrating how each control is implemented and maintained to meet Defense Federal Acquisition Regulation Supplement requirements. The work must be performed at Cherry Point, North Carolina, with a response deadline of August 4, 2026, and is issued under NAICS code 541512, which corresponds to computer systems design services. The responsible agency is the Department of Defense, specifically the DLA Fleet Readiness Center DLA PSC, indicating the contract supports logistics and readiness operations within the military supply chain. Compliance is non-negotiable and failure to meet the requirements could result in contract termination or debarment. The subcontractor must be prepared to undergo assessments and validate control effectiveness without reliance on third-party certification, ensuring continuous alignment with federal cybersecurity posture standards.