Cybersecurity Compliance and CDI Safeguarding

This contract requires the implementation of NIST SP 800-171 security controls to protect Covered Defense Information and ensure full compliance with DFARS 252.204-7012, covering requirements for incident reporting, access control, and systems security. The subcontractor must establish and maintain a robust cybersecurity posture that meets federal standards for safeguarding sensitive defense data, with an emphasis on controlling access, detecting potential threats, and timely reporting of cybersecurity incidents. Performance is expected to occur in Montgomery, Alabama, under a Total Small Business Set-Aside, limiting eligibility to small businesses certified under SBA guidelines. The North American Industry Classification System code 541512 indicates the work falls under computer systems design and related services. The solicitation has a response deadline of July 17, 2026, and is managed by the Department of Defense under the W7MT Uspfo Activity Al Arng, with all compliance obligations tied directly to the handling of covered defense information and adherence to mandated federal cybersecurity protocols.