Cybersecurity & CDI Compliance Services

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST Special Publication 800-171 to safeguard Covered Defense Information across all operational systems and environments. This includes establishing robust technical, administrative, and physical safeguards to ensure compliance with federal requirements for protecting sensitive defense data. The contractor must also establish and maintain procedures for timely incident reporting in accordance with mandated guidelines, ensuring rapid detection, response, and documentation of any cybersecurity breaches or anomalies involving Covered Defense Information. Flow-down obligations are a critical component, requiring the contractor to extend the same NIST SP 800-171 compliance requirements to all subcontractors and third-party vendors involved in handling Covered Defense Information. This ensures end-to-end adherence to security standards throughout the supply chain. The work is performed under a subcontract awarded by the Defense Logistics Agency on behalf of the Department of Defense, with the North American Industry Classification System code 541512 indicating it falls under computer systems design and related services. The contract is active as of July 2026 and applies universally to all phases of performance regardless of geographic location.