Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST Special Publication 800-171 security controls to safeguard covered defense information within the contractor’s systems and processes. This effort is mandatory to ensure full compliance with the Defense Federal Acquisition Regulation Supplement clauses 252.204-7012 and 252.240-7997, which outline the federal requirements for protecting sensitive unclassified information related to defense contracts. The contractor must establish a robust cybersecurity posture that meets the specific technical, administrative, and physical safeguards detailed in NIST SP 800-171, including access control, audit, configuration management, incident response, and system integrity measures. This is a subcontract under the Maritime Supply Chain organization within the Department of Defense, with a North American Industry Classification System code of 541512, indicating alignment with computer systems design and related services. The solicitation was posted on July 16, 2026, and responses are due by July 27, 2026. While no specific location is designated for performance, compliance must be achieved regardless of where the work is carried out. The contractor is expected to demonstrate continuous adherence to these cybersecurity standards throughout the term of the subcontract, ensuring that all covered defense information remains protected against unauthorized access, disclosure, or compromise.