Supply Chain Cybersecurity and DFARS Compliance Support

The contract requires comprehensive cybersecurity compliance support to ensure full adherence to NIST SP 800-171 standards for protecting covered defense information on nonfederal systems. This includes implementing all required security controls, maintaining documented policies and procedures, and establishing continuous monitoring practices to safeguard sensitive data. The contractor must also manage and execute cyber incident reporting procedures as mandated by DFARS 252.204-7012, ensuring timely notifications to the Department of Defense and proper documentation of all incidents. Flow-down of these cybersecurity requirements to all subcontractors is mandatory, with the prime contractor responsible for verifying compliance across the entire supply chain and maintaining audit-ready records. The effort is designated as a subcontract under NAICS code 541512, reflecting its focus on computer systems design services. It is issued by the Department of Defense through the ASC SUPPLIER OPER AE AND AF DIV and is open for responses until August 10, 2026. Performance is expected to occur within the broader defense industrial base environment, with no specific location designated. The contractor must possess demonstrated expertise in defense cybersecurity regulations, experience with NIST controls, and the ability to support DoD supply chain integrity through robust documentation, training, and oversight of subcontractor compliance.