Export-Controlled Items Compliance (ITAR/EAR)

The contract requires the implementation of compliance procedures for ITAR and EAR export-controlled items alongside adherence to NIST SP 800-171 cybersecurity standards, including the establishment of protocols for cyber incident reporting. This effort is focused on ensuring that all handling, storage, and transmission of controlled technical data and defense articles meet federal regulatory requirements, with particular attention to securing information systems that process, store, or transmit sensitive export-controlled information. The subcontractor must demonstrate the ability to align internal processes with both export control and cybersecurity frameworks, ensuring readiness for audits and compliance verification. Performance is required at a designated location in Norfolk, Virginia, with a response deadline of July 27, 2026, and a posted date of July 22, 2026. The contract falls under NAICS code 541611, indicating it involves administrative management and general management consulting services, and is issued by the Department of Defense through the Subsistence FSE Supply Chain office. Although no specific set-aside type is designated, the subcontract nature implies participation by a contractor supporting a prime vendor or government entity under a broader acquisition. The solicitation is accessible via the DIBBS platform and demands a thorough understanding of international traffic in arms regulations, export administration regulations, and the full scope of NIST SP 800-171 controls related to confidentiality, integrity, and incident response in protected systems.