Cybersecurity Compliance for Defense Contractors (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard Covered Defense Information in full compliance with DFARS 252.204-7012 and the National Institute of Standards and Technology Special Publication 800-171. This includes establishing technical, administrative, and physical safeguards to ensure the confidentiality, integrity, and availability of sensitive information handled under the agreement. The contractor must also conduct regular system assessments to validate adherence to NIST SP 800-171 requirements and promptly report any cybersecurity incidents affecting Covered Defense Information as mandated by federal guidelines. This subcontract is issued under the Department of Defense through the Maritime Supply Chain organization and is classified under NAICS code 541512, indicating it relates to computer systems design services. The solicitation was posted on July 23, 2026, with a firm deadline for responses on July 29, 2026. While specific performance locations and point of contact details are not provided, the contractor is expected to meet all federal cybersecurity obligations regardless of where the work is performed. Compliance with these requirements is non-negotiable and forms the core deliverable of this agreement.