Covered Defense Information (CDI) Cybersecurity Compliance

The contract involves implementing and maintaining cybersecurity controls in accordance with NIST SP 800-171 standards for systems that handle Covered Defense Information (CDI). Key responsibilities include managing cyber incident reporting and developing both the System Security Plan (SSP) and the Plan of Action and Milestones (POA&M) to ensure ongoing compliance and risk mitigation. The work is designated as a subcontract related to the Department of Defense, specifically under the Medical Supply Chain Pharmacy FSA, and will be performed at Eglin Air Force Base. The solicitation was posted on May 18, 2026, with a response deadline of May 26, 2026. It falls under the NAICS code 541512, which corresponds to computer systems design services. While specific details about set-asides or organization type are not provided, the contract emphasizes securing defense information through rigorous cybersecurity protocols to protect sensitive data managed by the DoD. Further information and access to the solicitation can be found through the provided DIBBS web link.