Export-Controlled Technical Data Management

The contract requires strict management of export-controlled technical data governed by ITAR, EAR, and DFARS 252.204-7012, mandating full compliance with NIST SP 800-171 security controls to protect sensitive information. All handling, storage, transmission, and access to such data must adhere to prescribed cybersecurity standards, including the implementation of robust access controls, audit logging, and data encryption measures. The subcontractor is obligated to maintain a secure information system environment and ensure that all personnel are trained and aware of their responsibilities under these regulations. Any cyber incidents involving the compromise, loss, or unauthorized access to covered defense information must be reported immediately in accordance with DFARS requirements, including providing detailed forensic data and remediation actions to the appropriate authorities. The contract applies to all phases of performance and extends to any third parties or subcontractors engaged in the handling of technical data. Compliance is continuously monitored, and failure to meet the specified security or reporting obligations may result in contract termination, financial penalties, or loss of eligibility for future DoD work. The solicitation is open for bid under NAICS code 541690 with a firm deadline for responses set for August 11, 2026.