Cybersecurity Compliance and CDI Safeguarding

The contract requires full implementation and documentation of NIST SP 800-171 controls to safeguard Covered Defense Information (CDI) across all relevant systems and processes. This includes establishing technical, administrative, and physical safeguards to ensure the confidentiality, integrity, and availability of CDI, as well as conducting a thorough system assessment to validate compliance with all specified controls. The contractor must also establish and maintain procedures for timely cyber incident reporting in accordance with federal requirements, ensuring rapid identification, response, and escalation of any security breaches or anomalies affecting CDI. The effort is structured as a subcontract under the Department of Defense, with performance focused at a specified location in Lima, Ohio, 45804-3700. The North American Industry Classification System code 541512 indicates this contract pertains to computer systems design services, reflecting the technical nature of the compliance work. The solicitation was posted on July 16, 2026, and responses are due by July 27, 2026, leaving a limited window for qualified entities to submit proposals. Compliance with NIST SP 800-171 is mandatory, and the contractor must demonstrate not only technical implementation but also comprehensive documentation and readiness for audit or assessment by government entities.