Cybersecurity & Covered Defense Information (CDI) Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Covered Defense Information (CDI) across all systems and environments involved in the performance of work. This includes conducting comprehensive system assessments to verify compliance with the control requirements, registering systems in the Supplier Performance Risk System (SPARS), and establishing procedures for timely and accurate cyber incident reporting in accordance with federal mandates. The subcontract is focused exclusively on cybersecurity posture enhancements to meet Department of Defense standards for protecting sensitive information. Performance is expected to occur at New Cumberland, Pennsylvania, with a strict submission deadline of August 7, 2026, following a posting date of July 30, 2026. The North American Industry Classification System code 541512 indicates the work falls under custom computer programming services, suggesting the contractor will be providing specialized technical support for cybersecurity infrastructure. The contracting activity falls under the ASC Commodities Division of the Department of Defense, emphasizing the critical nature of safeguarding CDI across defense supply chain operations. The subcontract structure implies that this effort supports a larger prime contract, and compliance with NIST controls is non-negotiable for contract award and sustained performance.