Government-Furnished Information (GFI) and Cyber Incident Reporting Compliance

This contract requires the implementation of cybersecurity measures mandated by the Defense Federal Acquisition Regulation Supplement (DFARS), focusing on the protection of Government-Furnished Information through robust technical and procedural controls. The contractor must ensure compliance with cyber incident reporting requirements, including timely identification, documentation, and notification of any security breaches or anomalies affecting controlled unclassified information. In addition, the contractor is obligated to provide comprehensive employee training on whistleblower protections and the legal prohibitions against confidentiality agreements that interfere with reporting misconduct or violations of law. The work is to be performed at the specified location in New Cumberland, Pennsylvania, under a subcontract arrangement tied to the Department of Defense’s Maritime Supply Chain initiative. All activities must align with the NAICS code 541611, reflecting the specialized nature of the cybersecurity and compliance services being procured, with responses due by July 27, 2026.