Cybersecurity Compliance for Covered Defense Information (CDI)

The contract involves the implementation and evaluation of cybersecurity controls based on the NIST SP 800-171 framework to safeguard Controlled Unclassified Information (CUI) within a defense context. This includes adherence to stringent security requirements and the submission of the Supplier Performance Risk System (SPRS) score, which is critical for maintaining compliance and ensuring continued eligibility for Department of Defense contracts. The effort is classified as a subcontract under the NAICS code 541512, which relates to computer systems design services. Awarded by the Department of Defense’s ASC Supplier OEM Division, the work is to be carried out in New Cumberland, with a focus on enhancing cybersecurity posture in accordance with federal standards protecting defense information. The solicitation was posted on May 11, 2026, with responses due by May 19, 2026. The contract directly supports defense suppliers by ensuring they meet mandated cybersecurity requirements to protect sensitive information and maintain operational trust within the defense supply chain.