Cybersecurity Compliance & CDI Safeguarding

This contract requires the implementation of NIST SP 800-171 security controls to protect covered defense information, with a focus on enforcing strict access controls, continuous monitoring, and mandatory reporting of any cyber incidents within 72 hours. The scope centers on ensuring compliance with federal cybersecurity standards to safeguard sensitive data handled under Department of Defense obligations. All required controls must be fully integrated and operational to meet the defined safeguarding requirements for covered defense information. The contract is structured as a small business set-aside under the SBA’s Total Small Business Set-Aside program, designated for NAICS code 541512, which covers computer systems design and related services. It is issued by the ASC Commodities Division under the Department of Defense and is open for responses until August 17, 2026. Successful bidders will be expected to deliver a fully compliant cybersecurity posture that aligns with NIST standards, including documented policies, technical implementations, and response protocols for cyber incidents, all performed in support of defense-related operations.