Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard covered defense information as mandated by NIST SP 800-171 and DFARS 252.204-7012, ensuring compliance with federal cybersecurity standards for contractors handling sensitive defense data. This subcontract is part of the Department of Defense’s Maritime Supply Chain initiative and is designed to enforce consistent, robust security protocols across the supply base to prevent unauthorized access, disclosure, or compromise of controlled unclassified information. The solicitation was posted on July 22, 2026, with a response deadline of August 6, 2026, and is classified under NAICS code 541512 for computer systems design services. There is no set-aside designation specified, and while the agency and performance location details are not provided, the obligation applies to any entity managing or processing covered defense information under this subcontract. Compliance with all technical, administrative, and reporting requirements outlined in NIST 800-171 is mandatory, including but not limited to access control, audit and accountability, configuration management, incident response, and system and communications protection measures.