Cybersecurity Compliance for Covered Defense Information

The contract requires implementation of NIST Special Publication 800-171 security controls to safeguard covered defense information across all systems and environments involved in the work. Compliance with these controls is mandatory to ensure the confidentiality, integrity, and availability of sensitive data as defined by the Defense Federal Acquisition Regulation Supplement. The subcontractor must also establish and maintain processes for timely cyber incident reporting in accordance with DFARS requirements, ensuring any security breaches or anomalies are identified, documented, and communicated to the appropriate authorities without delay. Performance of this work is specifically tied to the location in Lenoir, North Carolina, with the North American Industry Classification System code 541512 indicating the focus on computer systems design services. The contract is structured as a subcontract under the Department of Defense’s Land Supply Chain organization, and responses must be submitted by the deadline of August 10, 2026. All activities must align fully with federal cybersecurity standards and be executed in a manner that supports the broader mission of protecting defense-related information throughout the supply chain.