Cybersecurity and CDI Compliance Support

This contract requires full adherence to NIST SP 800-171 standards for systems that handle controlled unclassified information, with a focus on implementing robust cybersecurity controls to protect sensitive data. The contractor must perform regular self-assessments to evaluate compliance status, identify gaps, and develop detailed Plans of Action and Milestones to remediate identified weaknesses in a timely and documented manner. All cyber incidents involving CDI must be reported in strict accordance with DFARS requirements, ensuring prompt notification and coordinated response to potential threats or breaches. The effort is scoped to support secure handling of CDI within defense-related systems, emphasizing continuous monitoring, documentation, and proactive risk mitigation. The contract is structured as a subcontract under a Service-Disabled Veteran-Owned Small Business Set-Aside, aligned with NAICS code 541512 for computer systems design services. It is sponsored by the Department of Defense through ASC INDUSTRIAL PLANT EQUIPMENT and is available for submission until August 14, 2026. Performance is expected to occur wherever the contractor’s operations support the handling of CDI, with no specific geographic limitations indicated. Compliance with all cybersecurity protocols is mandatory and will be central to evaluating contractor performance, with failure to meet reporting or implementation obligations potentially resulting in contract breach or termination.