Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information in alignment with DFARS 252.204-7012 requirements. This includes establishing comprehensive cybersecurity measures to safeguard sensitive data, ensuring timely detection and reporting of cyber incidents, and maintaining continuous compliance throughout the contract period. All activities must be executed to meet federal standards for information protection and incident response as mandated for defense contractors handling controlled unclassified information. This is a subcontract under the Department of Defense, specifically coordinated by the ASC Commodities Division, with performance required at the location in New Cumberland, Pennsylvania, zip code 17070-5002. The solicitation, classified under NAICS code 541512 for computer systems design services, was posted on July 30, 2026, with responses due by August 7, 2026. Bidders must demonstrate proven capability in applying NIST 800-171 controls and managing DFARS compliance, and the work is expected to be performed in support of critical defense infrastructure through secure systems and documented compliance protocols.