Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation and thorough documentation of NIST Special Publication 800-171 security controls across all systems handling Covered Defense Information or Controlled Unclassified Information, ensuring alignment with Department of Defense cybersecurity mandates. This includes conducting comprehensive self-assessments to validate compliance with the 110 safeguards outlined in NIST SP 800-171, as well as establishing and maintaining robust incident reporting procedures mandated by DFARS 252.204-7012 to promptly disclose any cybersecurity breaches or unauthorized access involving CUI/CDI. All documentation must be accurate, up to date, and ready for audit or review by government authorities. The work is structured as a subcontract under the Maritime Supply Chain division of the Department of Defense, with the North American Industry Classification System code 541512 indicating IT consulting and related services. The solicitation was posted on July 22, 2026, and responses are due by August 6, 2026. While no specific location is designated for performance, the contractor must be prepared to support DoD requirements remotely or on-site as needed, and must demonstrate the capability to not only meet technical standards but also sustain ongoing compliance through continuous monitoring, documentation maintenance, and timely incident response.