Cybersecurity and Covered Defense Information (CDI) Safeguarding

This contract requires the implementation of NIST SP 800-171 controls to safeguard covered defense information held or processed by the contractor, ensuring that all required security measures are in place to protect sensitive data from unauthorized access, disclosure, or compromise. Compliance with DFARS 252.204-7012 is mandatory, which includes not only the application of the specified cybersecurity controls but also the timely reporting of any cyber incidents affecting the confidentiality, integrity, or availability of covered defense information. The contractor is obligated to follow prescribed procedures for incident notification and cooperation with government investigations, maintaining detailed records of actions taken in response to any security events. The contract is a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, and is categorized under NAICS code 541512, indicating it relates to computer systems design services. It is effective as of July 20, 2026, with performance location details not specified, but the requirement to protect covered defense information applies regardless of geographic location. The contractor must ensure that all systems, networks, and personnel handling such information adhere strictly to the NIST framework and DFARS compliance obligations, with potential consequences for noncompliance including contract termination, financial penalties, or loss of future business opportunities with the Department of Defense.