Cybersecurity Compliance and CDI Protection (Subcontract Support)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Covered Defense Information across all contractor systems, ensuring full compliance with DFARS 252.204-7012 requirements. This subcontract support effort is focused on protecting sensitive unclassified information related to Department of Defense programs by enforcing robust cybersecurity standards that mitigate risks of unauthorized access, disclosure, or compromise. The contractor must demonstrate continuous adherence to these controls through documentation, monitoring, and reporting practices aligned with federal cybersecurity guidelines. This is a total small business set-aside under SBA regulations, reserved exclusively for small businesses as defined by the North American Industry Classification System code 541512, which pertains to computer systems design services. The solicitation was posted on July 16, 2026, with a response deadline of July 31, 2026, and is managed by the Strategic Acquisition Program Directorate within the Department of Defense. Performance of the work is expected to support defense acquisition programs, though no specific location is designated for performance. The subcontractor must be prepared to operate under stringent compliance obligations without direct oversight from the government, relying instead on self-certification and audit readiness to maintain contract standing.