Cybersecurity and Covered Defense Information (CDI) Safeguarding

This contract seeks a small business subcontractor to implement cybersecurity measures safeguarding covered defense information in compliance with DFARS 252.204-7012 and CMMC Level 1 requirements. The work involves establishing and maintaining the foundational security controls necessary to protect sensitive government data processed or stored on contractor systems, ensuring alignment with the Department of Defense’s cybersecurity standards. The subcontractor must demonstrate capability to meet the baseline security practices outlined in CMMC Level 1, which include access control, awareness training, and incident reporting, without requiring third-party assessments at this level. The opportunity is structured as a total small business set-aside under FAR 19.5, exclusively available to small businesses certified by the SBA, with the NAICS code 541512 indicating it pertains to computer systems design services. Proposals must be submitted by July 29, 2026, at 6:30 PM Eastern Time, and performance is expected to occur at Edwards, though no specific facility or address is listed. The contracting activity is under the Department of Defense, specifically the FA9301 AFTC PZIO office, with the project aiming to enhance the cybersecurity posture of the defense industrial base through targeted subcontracted support.