Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation of NIST SP 800-171 controls to safeguard Covered Defense Information against unauthorized access, disclosure, or compromise, ensuring alignment with Department of Defense cybersecurity standards. The contractor must perform a self-assessment of their compliance with all 110 security requirements outlined in the publication, documenting findings and addressing gaps to achieve an acceptable compliance posture. This includes establishing and maintaining robust cybersecurity practices across systems handling sensitive defense data, with a focus on access control, audit and accountability, configuration management, and incident response capabilities. In addition to compliance implementation, the contractor is obligated to report any cyber incidents affecting Covered Defense Information in accordance with DoD reporting protocols, ensuring timely notification and cooperation during investigative or remediation efforts. Performance is tied to the designated location in Eau Claire, Wisconsin, with deliverables expected by the submission deadline of August 3, 2026. The contract is structured as a subcontract under NAICS code 541612, indicating it relates to management consulting services with a cybersecurity compliance focus, and is issued by the Land Supply Chain entity within the Department of Defense to support secure information handling across its supply chain network.