Cybersecurity Compliance & CDI Safeguarding

The contract requires implementation of all NIST SP 800-171 security controls to safeguard Covered Defense Information handled by the contractor, ensuring compliance with Department of Defense cybersecurity requirements. It mandates the establishment of a robust information security program aligned with NIST standards, including access controls, audit logging, data encryption, incident response planning, and continuous monitoring to protect sensitive data from unauthorized access, disclosure, or compromise. The contractor must also maintain the capability to detect, report, and respond to cyber incidents within strict timeframes as outlined in DFARS 252.204-7012, including submitting incident reports directly to the DoD via the appropriate reporting portal. This is a subcontract under the Department of Defense’s Land Supply Chain initiative, with performance location in FPO, ZIP 96693, and falls under NAICS code 541512 for computer systems design services. The solicitation was posted on July 19, 2026, with a firm deadline for responses on July 30, 2026. While no specific set-aside status or point of contact is provided, compliance with all cybersecurity and reporting obligations is non-negotiable and directly tied to contract fulfillment. Contractors must demonstrate existing or planned capacity to meet these requirements prior to award, with ongoing adherence required throughout the contract lifecycle.