Cybersecurity Compliance & Covered Defense Information (CDI) Safeguarding

The contract requires implementation of NIST SP 800-171 controls to safeguard covered defense information, ensuring robust cybersecurity measures are in place to protect sensitive data handled under the agreement. Contractors must establish and maintain compliance with all specified controls to mitigate risks associated with unauthorized access, disclosure, or compromise of covered defense information. A critical stipulation mandates immediate reporting of any cyber incident within 72 hours of discovery, underscoring the importance of rapid response and transparency in the event of a breach or suspicious activity. The subcontract falls under NAICS code 541512, indicating it pertains to computer systems design services, and is issued by the Department of Defense under the Nuclear Reactor Program. Performance is required at a designated location in New Cumberland, Pennsylvania, with a response deadline of July 27, 2026, and the solicitation was posted on July 16, 2026. Compliance is non-negotiable and essential for contract award and continued performance.