Export Control & Cybersecurity Compliance Support

The contract requires comprehensive support to ensure full compliance with Department of Defense cybersecurity standards, specifically implementing NIST SP 800-171 and achieving CMMC Level 2 maturity for the protection of controlled unclassified information. This includes developing, documenting, and maintaining security plans, conducting gap assessments, establishing incident response procedures, and ensuring timely reporting of cybersecurity incidents in accordance with federal mandates. The contractor must also manage export control obligations under ITAR and EAR regulations, which involve classifying technical data, implementing compliance programs, training personnel, and maintaining accurate records to prevent unauthorized technology transfers. Performance is required at Cherry Point, North Carolina, 28533-5040, and the work is structured as a subcontract under the Department of Defense’s Land Supplier Operations Vehicle Support acquisition. The effort is governed by NAICS code 541611, indicating management, scientific, and technical consulting services focused on compliance and security. Proposals must be submitted by July 27, 2026, with the solicitation issued by the Defense Logistics Agency through the DIBBS portal. All activities must align with federal cybersecurity and export control frameworks to safeguard sensitive defense information throughout the system lifecycle.