Cybersecurity and Covered Defense Information (CDI) Safeguarding

The contract requires implementation of NIST SP 800-171 controls to safeguard covered defense information across order, shipping, and compliance data streams, ensuring robust protection of sensitive data handled by the subcontractor. This includes establishing technical, administrative, and physical safeguards to meet federal cybersecurity standards and maintaining compliance through ongoing monitoring and documentation. Cyber incident reporting procedures must be in place to promptly notify the government of any security breaches or anomalies, and the contractor is obligated to complete and submit a Supplier Performance Risk System attestation to validate their compliance posture. The work is to be performed under a subcontract arrangement with the Fluid Handling Division of the Department of Defense, with the place of performance designated as FPO, ZIP 96675. The North American Industry Classification System code 541512 indicates this effort is related to computer systems design services, suggesting the focus is on integrating secure technical architectures to handle classified and controlled data. The solicitation was posted on July 19, 2026, with a response deadline of July 30, 2026, requiring prompt submission of proposals that demonstrate full alignment with NIST requirements and the ability to execute incident response and attestation processes effectively.