Cloud Service Provider for Covered Defense Information

The contract requires a cloud service provider to deliver FedRAMP Moderate-compliant hosting services for the storage and processing of covered defense information, ensuring alignment with NIST SP 800-171 security controls and full integration of Department of Defense incident reporting obligations. The service must meet stringent federal cybersecurity standards to protect sensitive national defense data, with compliance verified through continuous monitoring and adherence to authorized cloud security frameworks. The provider is expected to maintain an environment that supports secure data handling, access control, audit logging, and timely response to security events as mandated by DoD directives. This is a subcontract under the Defense Logistics Agency, part of the Department of Defense, with the NAICS code 518210 indicating cloud computing and related data processing services. The solicitation was posted in July 2026 and is intended for performance under the broader defense infrastructure, though specific location details for place of performance are not provided. The contract is governed by federal procurement regulations and necessitates rigorous documentation, continuous compliance validation, and direct integration with DoD cybersecurity reporting mechanisms. No set-aside status is designated, meaning the award is open to all qualified vendors regardless of size or ownership classification.