Cybersecurity and Covered Defense Information (CDI) Safeguarding

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 and DFARS 252.204-7012 to safeguard Covered Defense Information and Controlled Unclassified Information. This includes developing a System Security Plan, conducting assessments to verify compliance, and establishing procedures for timely incident reporting in accordance with federal requirements. The work is centered on ensuring that all systems handling CDI/CUI meet the mandatory security standards set by the Department of Defense, with a focus on continuous protection and operational readiness. This subcontract is issued under the NAICS code 541512 for computer systems design services and is managed by the Maritime Supply Chain division within the Department of Defense. Proposals must be submitted by August 6, 2026, and the performance location is not specified, indicating potential flexibility in execution. The contractor will be responsible for end-to-end cybersecurity compliance, requiring technical expertise in federal standards, documentation rigor, and the ability to respond effectively to security incidents. There is no set-aside designation, so the opportunity is open to all eligible entities seeking to support defense-related cybersecurity operations.