Cybersecurity and Covered Defense Information (CDI) Protection

This contract requires the implementation of NIST SP 800-171 security controls to protect covered defense information and ensure full compliance with DFARS 252.204-7012, which mandates the safeguarding of sensitive data and the timely reporting of cyber incidents. The work involves applying robust cybersecurity measures across systems and networks that handle covered defense information, including access controls, audit logging, incident response protocols, and continuous monitoring to meet federal defense standards. The contractor must demonstrate an established and documented security program aligned with NIST guidelines and be prepared to respond to any cyber incidents in accordance with regulatory timelines and reporting requirements. The subcontract is issued by the Defense Logistics Agency under the Department of Defense and falls under NAICS code 541512 for computer systems design services. The performance location is listed as FPO with ZIP code 96666, indicating operations may occur in a deployed or transient environment. The solicitation was posted on July 16, 2026, with a response deadline of July 27, 2026, and is accessible via the DIBBS platform. Potential responders must possess the technical capability to meet stringent cybersecurity requirements and be prepared to provide evidence of compliance throughout contract execution.