Cybersecurity Compliance (NIST SP 800-171)

The contract requires implementation and documentation of cybersecurity controls to safeguard covered defense information in alignment with NIST SP 800-171 standards. This includes conducting a thorough system assessment to validate compliance with all required controls, establishing processes for ongoing monitoring and maintenance of security posture, and ensuring timely reporting of any cyber incidents as mandated by the DFARS clause. All activities must be thoroughly documented to demonstrate adherence to federal cybersecurity requirements and support audit readiness. The work is scoped under a subcontract with a performance location in Cherry Point, North Carolina, with a NAICS code of 541512 indicating it is related to computer systems design services. The solicitation was posted on August 2, 2026, and responses are due by August 13, 2026. The contracting activity falls under the Department of Defense, specifically the Maritime Supply Chain organization, and the effort is critical to ensuring protected information remains secure against evolving cyber threats throughout the lifecycle of the subcontracted work.