Cybersecurity & Covered Defense Information (CDI) Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Covered Defense Information (CDI) handled by the contractor. Compliance with DFARS 252.204-7012 is mandatory, which includes adhering to specific cybersecurity requirements for protecting sensitive government data and promptly reporting any cyber incidents that affect CDI. The scope encompasses both technical and procedural measures to ensure data integrity, confidentiality, and availability across all systems processing or storing CDI. The contractor must demonstrate full alignment with federal cybersecurity standards and maintain documentation to prove compliance throughout the contract period. This is a subcontract solicited by the Department of Defense under the agency name Construction & Equipment Containers, with the North American Industry Classification System code 541512 indicating it relates to computer systems design services. The solicitation was posted on July 21, 2026, with responses due by July 28, 2026, and is issued through the DLA DIBBS portal. While no specific place of performance or point of contact is provided, the work is expected to support defense-related operations, and all activities must meet the stringent cybersecurity obligations defined by federal acquisition regulations. Failure to comply with the incident reporting or control implementation requirements could result in contract termination or penalties.