Cybersecurity Compliance (NIST SP 800-171)

The contract requires full implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to safeguard covered defense information handled by the contractor. Compliance with these controls is mandatory to ensure the confidentiality, integrity, and availability of sensitive data within the defense supply chain. The contractor must also adhere to the cyber incident reporting requirements specified in DFARS 252.204-7012, which includes timely detection, documentation, and reporting of any security breaches or anomalies affecting systems containing covered defense information. This is a small business set-aside subcontract under the SBA Total Small Business Set-Aside program, categorized under NAICS code 541512 for computer systems design services. The solicitation was posted by the Department of Defense through the Maritime Supply Chain office and is subject to a rigid response deadline in August 2026. Performance is expected to support defense-related cybersecurity objectives, with no specific location designated for performance, indicating potential flexibility in operational setup as long as compliance with federal cybersecurity standards is maintained throughout the contract lifecycle.