Cybersecurity Compliance & CDI Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 controls to protect Covered Defense Information and Controlled Unclassified Information throughout all stages of performance. Compliance with these cybersecurity standards is mandatory to ensure the confidentiality, integrity, and availability of sensitive data, with specific emphasis on safeguarding information handled at the place of performance located at Robins Air Force Base, Georgia, 31098-1887. Any cyber incident affecting CDI or CUI must be reported within 72 hours of discovery, and the contractor is responsible for maintaining continuous adherence to all applicable NIST requirements, including documentation, monitoring, and remediation efforts. This subcontract falls under NAICS code 541512, indicating it is related to computer systems design and related services, and is issued by the Active Devices Division of the Department of Defense. The solicitation was posted on July 9, 2026, with a response deadline of July 20, 2026, and is open for bids through the DIBBS platform. While no set-aside provisions are specified, performance is expected to meet all federal cybersecurity obligations under the Defense Federal Acquisition Regulation Supplement, and failure to comply with incident reporting timelines or control implementation may result in contract default or other penalties.