Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires the implementation and maintenance of cybersecurity controls to protect Covered Defense Information (CDI) in full compliance with NIST Special Publication 800-171 and the Defense Federal Acquisition Regulation Supplement clause 252.204-7012. This subcontract is issued by the ASC Commodities Division under the Department of Defense, with performance mandated at Corpus Christi, Texas, in the 78419-5255 zip code. The obligated party must establish, document, and sustain a robust cybersecurity framework that meets all specified NIST requirements, ensuring the confidentiality, integrity, and availability of CDI processed, stored, or transmitted within their systems. Failure to comply with these controls may result in contractual penalties or termination. The solicitation was posted on July 12, 2026, with responses due by July 20, 2026, indicating a short but critical timeframe for qualification and submission. The NAICS code 541512 identifies this as an information technology services contract, emphasizing the need for technical expertise in cybersecurity risk management and compliance documentation. The work is part of a broader defense supply chain initiative, requiring the contractor to align with federal cybersecurity standards and maintain ongoing adherence through audits, assessments, and continuous monitoring. All systems handling CDI must be configured and managed according to the prescribed controls without exception, and the contractor is responsible for demonstrating compliance throughout the contract lifecycle.