Cybersecurity and Covered Defense Information (CDI) Protection

The contract requires the implementation of comprehensive cybersecurity controls to safeguard Covered Defense Information in alignment with CMMC Level 2 and NIST SP 800-171 standards. This includes establishing, maintaining, and continuously monitoring technical and procedural safeguards to ensure the confidentiality, integrity, and availability of sensitive data, as well as enforcing strict incident reporting protocols to quickly identify, respond to, and mitigate any cybersecurity breaches or anomalies. All systems handling CDI must be hardened against threats, with access controls, audit logging, malware protection, and data encryption fully integrated into operational workflows. Performance is tied to the Jacksonville, Florida location with a zip code of 32212-0103, and the work falls under NAICS code 541512 for computer systems design services. This is a subcontract governed by the Department of Defense’s Land Supply Chain division, with responses due by July 6, 2026. The contractor must demonstrate full compliance with federal cybersecurity requirements, ensuring that all implemented controls meet or exceed the benchmarks set by CMMC Level 2 and NIST SP 800-171, and must maintain documentation to validate ongoing adherence to these standards throughout the contract lifecycle.