Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to protect Covered Defense Information (CDI) in accordance with Department of Defense requirements. This subcontract focuses on ensuring compliance with federal standards designed to safeguard sensitive unclassified information that is processed, stored, or transmitted by contractors supporting DoD missions. The work must be performed to meet strict security criteria that include access controls, audit and accountability measures, configuration management, incident response, and continuous monitoring, all critical to defending against cyber threats targeting defense-related data. The contract is issued under the Defense Logistics Agency within the Department of Defense and is classified under NAICS code 541512, indicating it involves computer systems design and related services. While the specific location of performance is not detailed, the obligation extends to maintaining compliance regardless of where the work is executed, and the requirements are binding under federal acquisition regulations. The subcontract is active as of July 2026 and is accessible through the DIBBS system with the contract number SPE8ED26V0397, indicating it is part of a broader procurement framework aimed at enforcing cybersecurity posture across the defense industrial base.