Cybersecurity and Covered Defense Information (CDI) Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Covered Defense Information across all systems involved in manufacturing, testing, and documentation processes. Compliance with these controls is mandatory to ensure the protection of sensitive data throughout the defense supply chain, with specific emphasis on securing information systems that handle CDI. The contractor must also maintain SPRS compliance, demonstrating adherence to cybersecurity requirements through the Supplier Performance Risk System, and promptly report any cybersecurity incidents affecting CDI in accordance with federal guidelines. This subcontract is designated as a Total Small Business Set-Aside under FAR 19.5, meaning only small businesses are eligible to respond, and it falls under NAICS code 541512 for Computer Systems Design Services. The work is performance-based with a place of performance in New Cumberland, Pennsylvania, 17070-5002. The contract was posted on July 21, 2026, and all proposals must be submitted by July 29, 2026. The awarding agency is the ASC Commodities Division within the Department of Defense, and the procurement targets organizations capable of delivering robust, auditable cybersecurity safeguards aligned with federal defense standards.