Cybersecurity and Covered Defense Information (CDI) Safeguarding

The contract requires implementation of NIST SP 800-171 controls to safeguard Covered Defense Information related to valve design and associated contract data, ensuring compliance with federal cybersecurity standards for protected information. All systems and processes handling this data must be configured to meet the specified security requirements, including access controls, audit capabilities, and protection against unauthorized disclosure. Any cyber incident affecting the integrity, confidentiality, or availability of the CDI must be reported within 72 hours of discovery, with prompt notification to the appropriate government authorities. This subcontract pertains to work performed at the NEW CUMBERLAND facility with a ZIP code of 17070-5002 and falls under NAICS code 541512, indicating a focus on computer systems design services. The contract is issued by the Department of Defense through the DDSP NEW CUMBERLAND FACILITY, with a response deadline of July 20, 2026, and a posting date of July 9, 2026. There is no specified set-aside classification, and the place of performance is limited to the designated location, requiring adherence to all physical and digital security protocols outlined in the NIST framework for handling sensitive defense information.