Cybersecurity and Covered Defense Information (CDI) Safeguarding

This contract involves the implementation and ongoing maintenance of cybersecurity controls to safeguard covered defense information (CDI) in alignment with the stringent requirements outlined in NIST SP 800-171 and the Defense Federal Acquisition Regulation Supplement (DFARS). The subcontract is a total small business set-aside under NAICS code 541512, which pertains to computer systems design services, indicating a focus on specialized technical expertise in cybersecurity. The Department of Defense, specifically the FA4877 355 Cons Pk office, is the contracting agency overseeing this effort, with the work to be performed in Tucson, AZ. The primary objective is to ensure that all covered defense information is adequately protected from cybersecurity threats and vulnerabilities through compliance with federally mandated standards. This entails establishing controls that address confidentiality, integrity, and availability of sensitive defense data across the contractor's systems. The contract underscores the importance of meeting both DFARS clauses and NIST guidelines to maintain eligibility for defense-related work, reflecting the critical nature of cybersecurity within defense supply chains.