Cybersecurity and CDI Compliance Support

This contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 for systems that handle covered defense information, ensuring compliance with federal standards for protecting sensitive data. The contractor must establish, document, and sustain technical and administrative safeguards to meet the requirements of the regulation, including regular assessments, system updates, and employee training to maintain continuous compliance. A key deliverable is the successful completion of the Supplier Performance Risk System assessment to demonstrate adherence to security requirements and the prompt reporting of any cyber incidents affecting covered defense information in accordance with mandatory federal reporting protocols. The work is being performed under a subcontract for the Department of Defense, specifically supporting Land Supplier Operations Engines, with performance centered at New Cumberland, Pennsylvania, ZIP 17070-5002. The solicitation falls under NAICS code 541512 for computer systems design services and is open for response until July 30, 2026. The contractor is expected to operate under a defense-industrial base framework, integrating cybersecurity practices into existing IT infrastructure while ensuring audit readiness and alignment with DoD expectations for supply chain security. All activities must be conducted to support secure handling of controlled unclassified information in non-federal systems.