Cybersecurity and Covered Defense Information (CDI) Safeguarding

This contract requires the implementation of NIST SP 800-171 security controls to safeguard covered defense information within systems handling sensitive data for the Department of Defense. The scope includes conducting a comprehensive system assessment to evaluate existing security posture, developing a System Security Plan that documents control implementation and risk management strategies, and establishing procedures for timely cyber incident reporting in accordance with federal requirements. All activities must align with the standards set forth in NIST SP 800-171 to ensure the confidentiality, integrity, and availability of covered defense information throughout the contract performance period. The contract is structured as a subcontract under the SBA set-aside program, targeting small business concerns eligible for federal contracting advantages. It is classified under NAICS code 541512 for computer systems design services and falls under the Maritime Supply Chain organization within the Department of Defense. Proposals must be submitted by the response deadline of July 20, 2026, with performance expected to occur in alignment with DoD requirements regardless of specific geographic location. Compliance with all cybersecurity obligations is mandatory, and failure to meet control implementation or reporting standards may result in contract termination or penalties.