Cybersecurity and Covered Defense Information (CDI) Safeguarding

This subcontract focuses on the implementation and ongoing maintenance of cybersecurity measures aligned with NIST SP 800-171 standards to safeguard Covered Defense Information (CDI). Key responsibilities include managing access controls, system hardening to reduce vulnerabilities, and ensuring compliance with a 72-hour reporting requirement for any cyber incidents to the Department of Defense. The effort supports enhanced protection of sensitive defense-related data and aligns with federal cybersecurity mandates. The contract is issued by the Department of Defense, specifically through the ASC Supplier OEM Division, with the place of performance identified as Cherry Point, North Carolina. Responses to this subcontract opportunity are due by June 4, 2026, and fall under NAICS code 541512, which pertains to computer systems design services. This engagement represents a critical role in defending defense information systems against cyber threats and ensuring prompt incident response in accordance with regulatory requirements.