Cybersecurity and Covered Defense Information (CDI) Protection

The contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard Covered Defense Information in alignment with NIST Special Publication 800-171 and Cybersecurity Maturity Model Certification Level 2 standards. This subcontract, issued under the Department of Defense through the Defense Logistics Agency, is focused on ensuring robust protection of sensitive data throughout its lifecycle by enforcing strict technical, administrative, and physical safeguards. The work must comply with federal requirements for handling controlled unclassified information within defense supply chains and demands continuous monitoring, documentation, and adaptation of security measures to address evolving threats. The performance of this contract is situated within the broader national defense infrastructure, with compliance tied to the NIST 800-171 control families including access control, audit and accountability, configuration management, and incident response. While the specific location of performance is not defined, the obligation applies wherever Covered Defense Information is processed, stored, or transmitted by the contractor. The subcontract is cataloged under NAICS code 541512, indicating it involves computer systems design and related services, and requires the contractor to maintain a validated cybersecurity posture verified through assessment and continuous improvement practices aligned with CMMC Level 2 expectations.