Subcontractor Cybersecurity Compliance Management

The contract requires comprehensive management and verification of subcontractor adherence to stringent cybersecurity standards including CMMC, NIST SP 800-171, and DFARS requirements. This involves conducting SPRS assessments and validating cybersecurity certificates to ensure all subcontractors meet the Department of Defense's compliance benchmarks. The work is centered on maintaining a secure supply chain by rigorously monitoring and documenting cybersecurity readiness across all relevant parties engaged under the subcontract. This is a total small business set-aside under the SBA program, exclusively available to small businesses as defined by NAICS code 541512, which pertains to computer systems design services. The contract is managed by the Pearl Harbor Naval Shipyard IMF within the Department of Defense, with performance occurring at JBPHH, HI 96860. The solicitation was posted on May 4, 2026, and responses are due by May 8, 2026, at 10:00 PM Eastern Time. All parties must be prepared to demonstrate full alignment with federal cybersecurity mandates and provide verifiable evidence of compliance through established assessment frameworks.