Cybersecurity Compliance and CDI Safeguarding (NIST SP 800-171)

The contract requires full implementation and ongoing maintenance of cybersecurity controls outlined in NIST SP 800-171 to safeguard Covered Defense Information handled by the contractor. This includes conducting regular system assessments to verify compliance, establishing a robust incident response capability, and ensuring timely reporting of any security incidents in accordance with DFARS 252.204-7012. The scope encompasses all technical, operational, and administrative measures necessary to protect sensitive defense data from unauthorized access, disclosure, or compromise across systems and networks. This subcontract is issued under the Department of Defense’s Defense Logistics Agency with a specific place of performance in East Lyme, Connecticut, 06333-0462. The work falls under NAICS code 541512, indicating it involves computer systems design and related services. The solicitation was posted on July 16, 2026, with a response deadline of July 27, 2026, requiring proposers to demonstrate proven capability in defending federal information systems against evolving cyber threats. Compliance with all NIST and DFARS requirements is mandatory and forms the foundation for contract performance and continued eligibility to handle controlled unclassified information.