Cybersecurity & Covered Defense Information (CDI) Compliance Provider

The contract requires the implementation and maintenance of cybersecurity controls aligned with NIST SP 800-171 to safeguard Covered Defense Information (CDI) as mandated by DFARS 252.204-7012. This subcontract is focused on ensuring that systems processing, storing, or transmitting CDI meet strict federal defense cybersecurity standards, including access controls, audit logging, incident response, and data encryption. The provider must establish a compliant environment that continuously monitors, assesses, and adapts to evolving threats while maintaining documentation and audit readiness for government reviews. The work is being performed under the Defense Logistics Agency, a component of the Department of Defense, with the North American Industry Classification System code 541512 indicating it involves computer systems design and related services. The contract’s performance location and specific details such as point of contact are not provided, but the obligation is binding regardless of physical location as long as the cybersecurity requirements are met. The solicitation was posted on August 4, 2026, and it is structured as a subcontract, meaning the provider will be supporting a prime contractor or another entity working directly with the DLA. Compliance is not optional and must be sustained throughout the contract term with evidence of ongoing adherence to NIST controls and DFARS requirements.