Cybersecurity and CDI Safeguarding (Subcontractor Support)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls across all systems handling Covered Defense Information, ensuring compliance with federal cybersecurity standards for safeguarding sensitive defense data. The subcontractor must establish robust procedures for identifying, reporting, and responding to cybersecurity incidents in a timely and thorough manner, and maintain continuous readiness for assessments to verify adherence to the required controls. This includes documenting security measures, managing access controls, protecting data at rest and in transit, and ensuring personnel are trained and aware of their responsibilities under the framework. The work is to be performed at Corpus Christi, Texas, with a response deadline of July 20, 2026, and is classified as a subcontract under the NAICS code 541512 for computer systems design services. The contracting activity is the ASC Commodities Division within the Department of Defense, indicating the scope is tied to defense-related operations and supply chain security. There is no set-aside designation specified, meaning the opportunity is open to all qualified subcontractors, but full compliance with NIST SP 800-171 requirements is mandatory for award and performance. The subcontractor must be prepared to demonstrate audit readiness and uphold strict information handling protocols throughout the contract lifecycle.