Cybersecurity & Covered Defense Information (CDI) Safeguarding

The contract requires the implementation and ongoing maintenance of cybersecurity controls as specified in NIST SP 800-171 to protect Covered Defense Information in accordance with DFARS 252.204-7012. This includes ensuring all systems and processes handling such information meet federal cybersecurity standards and are capable of detecting, reporting, and responding to cyber incidents as mandated. Compliance with incident reporting requirements is critical, necessitating timely notifications and accurate documentation of any security breaches affecting Covered Defense Information. This is a small business set-aside subcontract under the SBA’s Total Small Business Set-Aside program, classified under NAICS code 541512, and issued by the Department of Defense’s Strategic Acquisition Program Directorate. The opportunity was posted on August 4, 2026, with a response deadline of August 19, 2026. Performance location and specific office details are not provided, but the work is intended to support Department of Defense cyber security obligations. Contractors must be prepared to demonstrate full adherence to NIST controls and DFARS reporting protocols throughout the contract duration.