Cybersecurity Compliance & Incident Reporting (CDI Safeguarding)

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to ensure the protection of Covered Defense Information and Controlled Technical Information handled by the contractor. Compliance with these controls is mandatory and encompasses technical, administrative, and physical safeguards designed to defend against unauthorized access, disclosure, or loss of sensitive defense-related data. The contractor is obligated to maintain continuous adherence to these standards and must promptly report any cyber incidents involving CDI or CTI through the Defense Industrial Base Cybersecurity and Incident Reporting Portal, commonly known as DIBNet, as stipulated by federal requirements. The contract is classified as a subcontract under the Department of Defense, managed by the Defense Logistics Agency, and aligns with NAICS code 541512 for computer systems design services. Performance is expected to meet the cybersecurity obligations outlined in the Defense Federal Acquisition Regulation Supplement, with no specific geographic limitations noted. The contract was posted in July 2026 and is tied to a specific award identifier, indicating its placement within the DoD’s broader acquisition and compliance framework for securing sensitive technical information across the defense supply chain.