Cybersecurity and Covered Defense Information (CDI) Safeguarding

The contract requires the implementation and ongoing monitoring of cybersecurity controls to safeguard Covered Defense Information as mandated by DFARS 252.204-7012 and aligned with the National Institute of Standards and Technology Special Publication 800-171. This includes establishing, maintaining, and verifying technical, administrative, and physical safeguards to ensure the confidentiality, integrity, and availability of sensitive defense data handled under the agreement. The contractor must also establish procedures for timely detection, reporting, and response to cybersecurity incidents involving Covered Defense Information, complying with all federal reporting requirements and timelines. This is a subcontract under the Department of Defense’s Land Supply Chain program, with performance centered in New Cumberland, Pennsylvania, 17070-5002. It falls under NAICS code 541512 for Computer Systems Design Services and is open for response until July 30, 2026. The solicitation does not specify a set-aside status, and responsibility for compliance rests solely with the subcontractor to meet all federal cybersecurity standards without exception. The contract emphasizes continuous adherence to NIST SP 800-171 controls and immediate incident reporting to federal authorities in the event of a breach or compromise.