Cybersecurity Compliance for CDI/CTI Protection

The contract requires the implementation and ongoing maintenance of cybersecurity controls outlined in NIST SP 800-171 to protect Covered Defense Information and Controlled Technical Information throughout the duration of performance. These controls are mandatory for ensuring the confidentiality, integrity, and availability of sensitive data handled during subcontract activities under the Department of Defense. The work is classified as a subcontract under NAICS code 541512 and is administered by the Defense Logistics Agency, with performance expected to occur in support of broader DoD objectives. Compliance is not a one-time effort but an ongoing responsibility that must be continuously monitored and adjusted to remain aligned with current NIST standards and evolving threat landscapes. The contract is active as of August 5, 2026, and is linked to the award with contract number SPE8EE26D0301 and delivery order SPE8EE26F2800.