Cybersecurity & Covered Defense Information (CDI) Safeguarding

The contract requires the implementation and maintenance of NIST SP 800-171 controls to ensure the protection of Covered Defense Information (CDI) throughout all phases of order processing and documentation. This includes establishing robust cybersecurity measures to safeguard sensitive data from unauthorized access, disclosure, or compromise, with specific attention to compliance with federal standards applicable to defense contractors. The contractor must also establish and execute procedures for timely cyber incident reporting in accordance with regulatory requirements, ensuring immediate notification and coordinated response to any security breaches or anomalies affecting CDI. This subcontract falls under the NAICS code 541512 and is administered by the Defense Logistics Agency under the Department of Defense. The performance location and point of contact details are not specified, but the contractual obligations apply universally across all operations involving CDI. The emphasis is on proactive defense of information systems and continuous adherence to NIST guidelines, with failure to meet these requirements potentially impacting contract compliance and future eligibility for defense-related work. The contract was posted on June 25, 2026, and is accessible through the DIBBS system for further transactional details.