Cybersecurity & Covered Defense Information (CDI) Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 compliance to protect covered defense information, ensuring all required security controls are properly applied and monitored. This includes establishing and sustaining processes that align with the NIST framework to safeguard sensitive data handled within the subcontractor’s systems, with particular attention to access control, audit accountability, configuration management, and incident response capabilities. Full adherence to DFARS clause 252.204-7012 is mandatory, necessitating timely and accurate reporting of any cyber incidents impacting covered defense information, including cooperation with government investigations and preservation of relevant forensic data. Performance is tied to a specific location in Texarkana, Texas, with the work falling under NAICS code 541512 for computer systems design services. The subcontract is part of the Department of Defense’s Land Supply Chain initiative, and all activities must be completed in alignment with federal cybersecurity mandates without deviation. The response deadline is August 10, 2026, and successful bidders must demonstrate proven experience meeting NIST 800-171 requirements, including documented policies, employee training, and incident response procedures. Compliance is not a one-time effort but an enduring obligation throughout the contract lifecycle, with continuous monitoring and updates required to address evolving threats and regulatory changes.