Cybersecurity Compliance & Reporting (CDI Safeguarding)

This contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to safeguard Covered Defense Information across all systems and environments under the subcontractor’s responsibility. The effort is directed toward meeting the mandatory requirements of DFARS 252.204-7012, ensuring that sensitive government data is protected through technical, administrative, and physical safeguards. The subcontractor must establish a compliant cybersecurity posture that includes continuous monitoring, access control, audit logging, data encryption, and incident response readiness, with full integration into the Department of Defense’s cyber incident reporting framework. The subcontract obligates the contractor to promptly detect, report, and respond to any cyber incidents involving Covered Defense Information in accordance with DoD timelines and protocols. All activities must be documented and auditable to demonstrate continuous compliance through periodic assessments and self-certifications. The contract is issued under NAICS code 541512 for computer systems design services, and performance is expected to support the ASC SUPPLIER OPER AE AND AF DIV of the Department of Defense. Proposals must be submitted by the stated deadline, with selection anticipated to result in the assignment of responsibilities for ensuring secure, end-to-end protection of defense data throughout the subcontract’s lifecycle.