Cybersecurity Compliance (NIST SP 800-171) and Incident Reporting

This contract requires the implementation of NIST SP 800-171 security controls to protect covered defense information on systems operated by the subcontractor, in full compliance with DFARS 252.204-7012. The scope encompasses establishing and maintaining the required cybersecurity safeguards, conducting regular assessments to ensure controls are properly configured and functioning, and developing a documented plan for responding to and reporting cyber incidents. Any security breach or suspected compromise of covered defense information must be reported promptly to the Department of Defense according to the timelines and procedures outlined in the regulation. The work is tied to systems handling sensitive defense data and must align with federal cybersecurity standards applicable to defense subcontractors. The contract is issued under the NAICS code 541512 for computer systems design services and is classified as a subcontract associated with the Maritime Supply Chain branch of the Department of Defense. Performance is expected to occur at or support operations in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on July 5, 2026, and responses are due by July 16, 2026. The subcontractor must demonstrate technical and operational readiness to meet the full suite of NIST 800-171 requirements and maintain ongoing compliance throughout the contract period, with potential for audits or reviews by government representatives to verify adherence to cybersecurity mandates.