Export Control & Cybersecurity Compliance Support

The contract requires full compliance with Department of Defense cybersecurity and export control regulations, specifically implementing the cybersecurity standards outlined in DFARS 252.204-7012 and the export control requirements of DFARS 252.225-7048. This includes complete adherence to NIST SP 800-171 controls to protect controlled unclassified information, as well as establishing robust procedures for detecting, reporting, and responding to cybersecurity incidents in accordance with federal guidelines. The subcontractor must ensure all systems, processes, and personnel handling covered information meet the mandatory security frameworks and maintain continuous compliance throughout the performance period. The work is tied to a Defense Logistics Agency subcontract under NAICS code 541611, with performance centered in San Diego, California, and a response deadline of July 20, 2026. The solicitation is issued under the Department of Defense with no specific set-aside designation, indicating that eligible entities, including small businesses and large contractors, may compete. The location of performance is fixed at 92136-3581, and compliance with both cybersecurity protocols and export control obligations is mandatory for successful performance and continued contractual alignment.