Supply Chain Cybersecurity Compliance and Incident Reporting

The contract requires implementation and maintenance of all NIST SP 800-171 security controls to safeguard Covered Defense Information handled by the subcontractor, ensuring compliance with Department of Defense cybersecurity standards. This includes establishing and sustaining technical, administrative, and physical safeguards necessary to protect sensitive data throughout its lifecycle, with a focus on preventing unauthorized access, disclosure, or alteration. The subcontractor must also maintain continuous compliance, perform regular assessments, and document control effectiveness to meet ongoing regulatory requirements. In addition to proactive security measures, the contract mandates immediate cyber incident response procedures and the submission of detailed forensic data to the Department of Defense whenever a security breach or compromise is detected. This includes timely reporting of incidents, preservation of evidence, and cooperation with DoD investigations to support attribution and mitigation efforts. The performance location is identified as Cherry Point, North Carolina, with all work tied to ASC Commodities Division under the NAICS code 541512, and the response deadline for submission is August 17, 2026.