Subcontractor Cybersecurity Flow-Down Compliance

The contract requires all non-commercial off-the-shelf subcontractors to fully comply with NIST Special Publication 800-171 cybersecurity standards, ensuring that protective measures are in place for controlled unclassified information. Subcontractors must provide evidence that a Basic Assessment has been completed and submitted to the Supplier Performance Risk System within the past three years, demonstrating their adherence to the required security controls. Compliance is non-negotiable and serves as a condition for contract award and performance. This opportunity is a Total Small Business Set-Aside under the SBA, restricted exclusively to small businesses, with the North American Industry Classification System code 541611 indicating it pertains to management, scientific, and technical consulting services. The contract is managed by DLA Maritime - Puget Sound under the Department of Defense, with performance required at Silverdale, Washington, 98383. All responses must be submitted by May 11, 2026, at 5:00 PM local time, and failure to meet the NIST 800-171 verification requirement will result in disqualification from consideration.