Cybersecurity & CDI Safeguarding

The contract requires full implementation of NIST SP 800-171 security controls to safeguard covered defense information, ensuring compliance with the cybersecurity standards mandated for handling sensitive government data. This includes establishing technical, administrative, and physical measures to protect the confidentiality, integrity, and availability of covered defense information throughout its lifecycle. The contractor must also enact procedures for timely incident reporting in accordance with DFARS 252.204-7012 and ensure that all flow-down requirements are applied to any subcontractors or third parties involved in the performance of work, extending the same cybersecurity obligations downstream. The work is scoped under a subcontract and is tied to a specific place of performance in Bremerton, WA, with a 98314-6001 ZIP code. The North American Industry Classification System code 541512 categorizes the effort within computer systems design services. The solicitation was posted on August 5, 2026, and responses are due by August 17, 2026, under the oversight of the Department of Defense through the Puget Sound organization. Although no set-aside classification is specified, the contract demands strict adherence to federal cybersecurity protocols and full accountability for protecting covered defense information, making compliance non-negotiable and central to contract execution.