Cybersecurity Compliance for Controlled Defense Information (CDI)

This contract demands the implementation and ongoing maintenance of cybersecurity controls to safeguard Covered Defense Information in strict alignment with DFARS and NIST standards. The work is centered on ensuring that all systems, processes, and personnel involved in handling sensitive defense data meet the mandatory security requirements established by federal regulations, with a focus on preventing unauthorized access, data breaches, and information compromise. The contractor must demonstrate the ability to enforce continuous monitoring, risk assessments, and remediation practices that adhere to these frameworks throughout the lifecycle of the contracted services. Performance is required at Hill AFB, Utah, with the specific technical and operational scope tied to supporting the Department of Defense through its ASC Supplier Operation OEM Division. The contract is structured as a subcontract under NAICS code 541512, indicating it involves computer systems design and related services, and responses must be submitted by April 30, 2026. The contractor is expected to maintain full compliance with all applicable cybersecurity controls, provide documentation proving adherence, and be prepared for audits or assessments to verify ongoing compliance. Failure to meet these obligations could result in termination, financial penalties, or loss of eligibility for future defense work.