Cybersecurity and Covered Defense Information (CDI) Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Covered Defense Information (CDI) within defense manufacturing operations, ensuring full compliance with DFARS 252.204-7012. This subcontract pertains to cyber defense measures for handling sensitive government data, mandating adherence to federal standards for protecting information systems against threats and unauthorized access. The work must be performed at Tinker Air Force Base, Oklahoma, under the oversight of the Department of Defense’s ASC SUPPLIER OPER AE AND AF DIV, and all security protocols must be continuously enforced to meet regulatory obligations throughout the contract lifecycle. Responses to this solicitation are due by August 17, 2026, and the effort falls under NAICS code 541512, which designates computer systems design and related services. The subcontractor must possess the technical capability to assess current cybersecurity posture, deploy required NIST controls across all relevant systems, document compliance, and support audits or assessments as needed. Continuous monitoring and reporting of security events are mandatory, and failure to maintain compliance may result in termination or loss of eligibility for future DoD work. This contract is critical for ensuring the integrity and confidentiality of defense-related data processed within the supplier’s operational environment.