Cybersecurity Compliance for Covered Defense Information

The contract mandates the implementation of NIST SP 800-171 security controls to safeguard covered defense information handled by the contractor, requiring full alignment with federal cybersecurity standards for nonfederal systems. This includes the development of a System Security Plan that documents how security requirements are met and the creation and maintenance of a Plan of Action and Milestones to address any outstanding security gaps, ensuring continuous compliance throughout the contract lifecycle. The work is scoped to support secure data handling practices in alignment with Department of Defense expectations for protecting sensitive information within the maritime supply chain environment. The contract is classified as a subcontract under NAICS code 541512 and is tied to a performance location in Norfolk, Virginia, with a response deadline of August 3, 2026. While no solicitation number is provided, the contract is accessible through the DIBBS platform and is managed under the Maritime Supply Chain division of the Department of Defense. All activities must be conducted with strict adherence to NIST guidelines, emphasizing the protection of covered defense information through documented policies, ongoing risk management, and timely remediation of identified deficiencies.