Cybersecurity and Covered Defense Information (CDI) Safeguarding

The contract mandates the protection of Covered Defense Information (CDI) generated or handled during contract performance, requiring full compliance with the cybersecurity requirements outlined in DFARS 252.204-7012 and the National Institute of Standards and Technology Special Publication 800-171. This includes implementing a comprehensive set of security controls to safeguard sensitive information from unauthorized access, disclosure, or compromise, ensuring that all systems, networks, and processes handling CDI meet federal defense cybersecurity standards. The subcontractor must establish, maintain, and document these protections throughout the lifecycle of the contractual obligation. The work is governed by the Defense Logistics Agency under the Department of Defense and falls under the NAICS code 541512, indicating it pertains to computer systems design and related services. The contract type is a subcontract, and while specific location details are not provided, performance obligations are tied to the handling of defense-related data in accordance with federal guidelines. All activities must align with strict cybersecurity protocols, and failure to comply may result in contractual penalties, loss of access to sensitive information, or termination. The contract was posted on July 20, 2026, and its official record is accessible through the DIBBS platform under contract number SPE2DS26PN241.