Cloud Service Provider for Covered Defense Information

The contract requires a cloud service provider to deliver FedRAMP Moderate-compliant hosting services for sensitive defense-related data containing covered defense information, ensuring full adherence to DFARS cybersecurity requirements and NIST SP 800-53 controls. The service must securely manage, store, and transmit data governed by federal defense regulations, with all infrastructure, processes, and personnel meeting stringent compliance standards to protect information systems from unauthorized access, disclosure, or compromise. The provider must maintain continuous authorization under FedRAMP, implement robust access controls, encryption, audit logging, and incident response protocols, and remain aligned with evolving Department of Defense cybersecurity directives. This subcontract falls under NAICS code 518210 for data processing and hosting services and is administered by the Defense Logistics Agency under the Department of Defense. The work is performance-based, with the cloud environment required to support mission-critical defense operations without geographic restrictions, though the specific place of performance is not defined. Although no set-aside status or point of contact is listed, the contract is openly available through DIBBS under award number SPE60226FD09G and is intended to enable secure cloud operations for defense contractors and government entities handling sensitive information under federal mandates.