Cybersecurity Compliance for Covered Systems

The contract requires the implementation and comprehensive documentation of NIST SP 800-171 cybersecurity controls across systems that process, store, or transmit Controlled Unclassified Information, in full alignment with DFARS 252.204-7012 requirements. This effort must ensure that all relevant security controls are properly configured, tested, and formally recorded to demonstrate compliance with federal standards for protecting CUI within defense contractor environments. The work is scoped as a subcontract under the Department of Defense, specifically tied to the Maritime Supply Chain division, with performance expected to occur at Tinker Air Force Base, Oklahoma, and must be completed by the response deadline of July 24, 2026. The solicitation, identified under NAICS code 541512 for Custom Computer Programming Services, mandates that all cybersecurity measures be thoroughly documented to support audits and assessments, requiring not only technical implementation but also clear evidence of policy enforcement, access controls, incident response readiness, and continuous monitoring capabilities. Contractors must be prepared to validate their cybersecurity posture against NIST guidelines and demonstrate adherence to the full scope of the DFARS clause, ensuring no gaps exist in the protection of sensitive unclassified data handled on behalf of the DoD. The contract is open for submission via the DIBBS platform with no set-aside classification specified.