Cybersecurity Compliance & CDI Safeguarding (IT/Compliance Support)

The contract requires the implementation and thorough documentation of NIST SP 800-171 security controls to safeguard Covered Defense Information and maintain compliance with DFARS 252.204-7012. This includes establishing technical, administrative, and physical measures to protect CDI throughout its lifecycle, ensuring that all systems and processes meet the mandated cybersecurity standards set by the Department of Defense. Documentation must be precise and audit-ready, demonstrating full adherence to each control requirement and providing evidence of ongoing compliance. Additionally, the contractor is responsible for establishing and maintaining procedures to promptly detect, report, and respond to cyber incidents involving CDI, in alignment with DFARS reporting obligations. The work is to be performed under a subcontract in support of the Defense Logistics Agency, with the North American Industry Classification System code 541512 indicating IT consulting and related services. The contract was posted on June 3, 2026, and performance is expected to meet the stringent cybersecurity requirements necessary for handling sensitive defense data, with no specific location designated for the place of performance.