Cybersecurity and Covered Defense Information (CDI) Safeguarding

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST Special Publication 800-171 to safeguard covered defense information. This includes developing and sustaining a System Security Plan, maintaining a Plan of Action and Milestones to address control deficiencies, promptly reporting cybersecurity incidents, and conducting annual assessments to ensure continuous compliance. The contractor must ensure all activities fully adhere to the mandated security standards to protect sensitive defense data from unauthorized access, disclosure, or compromise. This is a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, with the NAICS code 541512 indicating it falls under computer systems design services. The contract was posted on July 16, 2026, and is tied to a specific delivery order under the larger contract SPE4A520DP002. Execution of the cybersecurity requirements is expected to be completed in alignment with federal government standards, with no specific place of performance or set-aside status indicated. The contractor is accountable for sustaining compliance throughout the contract lifecycle without reliance on external documentation or file references.