Cybersecurity Safeguarding and Incident Reporting

The contract requires implementation of NIST SP 800-171 security controls to protect covered defense information and ensure compliance with federal cybersecurity standards. All subcontractors must establish and maintain robust safeguards to prevent unauthorized access, disclosure, or manipulation of sensitive data handled under the agreement. Any cyber incidents must be reported to the appropriate authorities within 72 hours of discovery, accompanied by complete forensic evidence preserved in accordance with established protocols to support investigation and remediation efforts. This subcontract is issued under the Department of Defense through the Maritime Supply Chain agency, with performance required at the location in New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation was posted on July 30, 2026, and responses are due by August 10, 2026. The NAICS code 541512 identifies the primary business category as computer systems design services, indicating the scope involves technical cybersecurity implementation and support. The contract is structured as a subcontract, and no specific set-aside designation is applicable.