Cybersecurity Compliance and CDI Protection

The contract requires the implementation and maintenance of cybersecurity controls aligned with NIST SP 800-171 to safeguard Covered Defense Information across all systems and environments under the agreement. Compliance must include robust incident response procedures and mandatory reporting of cybersecurity incidents in accordance with DFARS 252.204-7012, ensuring timely communication of breaches or unauthorized access. The contractor is responsible for sustaining these controls continuously, performing regular assessments, and demonstrating adherence through documentation and audit readiness. This subcontract is tied to Department of Defense operations under the NAICS code 541512, with performance expected to occur in Coffeyville. The solicitation was posted on July 8, 2026, and responses are due by July 29, 2026. All work must be executed in full alignment with federal cybersecurity standards for defense contractors, with no allowances for deviation from the required NIST controls or DFARS reporting obligations. The contract places strict accountability on the subcontractor to protect sensitive information and respond appropriately to any security events, emphasizing vigilance and compliance throughout the performance period.