Cybersecurity and Covered Defense Information Compliance (CDI)

This contract requires strict adherence to NIST SP 800-171 and DFARS 252.204-7012 to ensure the protection of Covered Defense Information within contractor systems, including the implementation of specified security controls and the timely reporting of any cyber incidents. The work is limited to small businesses under a Total Small Business Set-Aside, with the North American Industry Classification System code 541611 indicating a focus on management consulting services related to cybersecurity compliance. Performance is designated at Malmstrom AFB, Montana, and the contract must be submitted by July 20, 2026, with a posting date of July 10, 2026. The solicitation is issued under the Department of Defense and is intended for a subcontract arrangement, placing responsibility on the subcontractor to maintain compliant systems and respond to cyber events as required by federal defense standards.