Cybersecurity & Covered Defense Information (CDI) Compliance

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 controls to protect covered defense information and ensure full compliance with DFARS requirements. The work focuses on establishing a secure information system environment capable of safeguarding sensitive data as defined by federal cybersecurity standards, specifically tailored for defense subcontractors. The performance location is in New Cumberland, Pennsylvania, with a zip code of 17070-5002, and the contract falls under NAICS code 541512 for computer systems design services. The contract is structured as a subcontract under the Department of Defense, issued by the ASC SUPPLIER OPER AE AND AF DIV, and is subject to a tight response deadline of July 21, 2026. Compliance with NIST SP 800-171 is not optional—it must be fully integrated into the contractor’s operational processes, including access controls, audit mechanisms, configuration management, and incident response protocols. Continuous monitoring and documentation are expected to demonstrate adherence throughout the contract lifecycle, ensuring that all covered defense information remains protected against unauthorized access, disclosure, or compromise in alignment with Defense Federal Acquisition Regulation Supplement requirements.