Cybersecurity & Covered Defense Information Safeguarding

The contract requires the implementation of NIST SP 800-171 security controls to safeguard Covered Defense Information (CDI) associated with the supplied item, ensuring all systems handling such data comply with federal cybersecurity standards for non-federal systems. This includes establishing and maintaining technical, administrative, and physical safeguards to protect the confidentiality, integrity, and availability of CDI, as well as establishing procedures for timely detection, reporting, and response to cyber incidents affecting the covered systems. The contractor must be prepared to report any cybersecurity incidents involving CDI in accordance with federal requirements, including providing detailed incident documentation and cooperating with any subsequent investigations. The contract is classified as a subcontract under the Department of Defense’s Land Supply Chain, with performance located at Fort Carson, Colorado, 80913-4093. It falls under the NAICS code 541512 for Computer Systems Design Services, reflecting the technical nature of the required cybersecurity implementation. Responses are due by July 27, 2026, and the opportunity was posted on July 14, 2026. The contractor must demonstrate capability to meet NIST 800-171 requirements without delay and must ensure all processes align with DoD expectations for handling sensitive defense information within the supply chain.