Top

Cybersecurity Compliance for Covered Defense Information (CDI)

Active

Federal

Response Deadline08/17/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

Department Of Defense → ASC SUPPLIER OPER AE AND AF DIVView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

ALBANY, GA, 31704-1128, US

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedAug 9

subcontract

Response DeadlineAug 17

Submission deadline

Response Deadline

08/17/2026, 05:00:00 PM UTCin 8 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

AgencyDepartment Of Defense → ASC SUPPLIER OPER AE AND AF DIV

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → ASC SUPPLIER OPER AE AND AF DIV

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Implement NIST SP 800-171 controls to safeguard CDI and support cyber incident reporting within 72 hours as required by DFARS 252.204-7012.

Similar Contracts

Same NAICS industry code

NAICS: 541512

New

DIBBS

Cybersecurity Compliance (CMMC Level 2 & NIST SP 800-171)The contract requires the implementation and maintenance of robust cybersecurity controls to protect covered defense information in full alignment with CMMC Level 2, NIST SP 800-171, and DFARS regulatory standards. This effort is critical to ensuring the confidentiality, integrity, and availability of sensitive data handled under the subcontract, with compliance being non-negotiable and subject to verification. All security practices must be systematically documented, monitored, and continuously improved to meet the rigorous requirements set forth by the Department of Defense. This subcontract is positioned under NAICS code 541512, indicating it relates to computer systems design services, and is tied to a performance location in Tracy, California, with a zip code of 95304-5000. The procurement was posted on August 9, 2026, with responses due by August 20, 2026. It falls under the purview of the Department of Defense, specifically managed by the Construction & Equipment MRO SVC I organization, and is issued through the DIBBS system. While no set-aside designation is specified, the contractor must be prepared to demonstrate full adherence to all federal cybersecurity mandates without deviation.

CONSTRUCTION & EQUIPMENT MRO SVC I

POSTED

DEADLINE

Cybersecurity Compliance (NIST SP 800-171)The contract requires the implementation and documentation of NIST SP 800-171 cybersecurity controls to safeguard Covered Defense Information within contractor systems that handle classified or sensitive contract data. This effort is mandatory for ensuring compliance with federal cybersecurity standards applicable to defense contractors and involves a full assessment and record-keeping of all required security controls across systems processing protected information. The work must be completed in alignment with the NIST framework and demonstrated through formal documentation to meet contractual obligations. The contract is classified as a subcontract under the NAICS code 541512, associated with computer systems design services, and is issued by the ASC Commodities Division of the Department of Defense with performance required in Tracy, California, 95304-5000. The solicitation was posted on August 9, 2026, with a response deadline of August 17, 2026, indicating a tight turnaround for submission. Although no set-aside type is specified, the contract is governed by DoD cybersecurity regulations and demands strict adherence to NIST guidelines to protect national defense information, making compliance non-negotiable for award consideration.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Cybersecurity Compliance & NIST 800-171 Assessment

ASC SUPPLIER OPER AE AND AF DIV

POSTED

DEADLINE

Cybersecurity and CMMC Assessment SupportThe contract seeks to provide specialized support to a prime contractor in achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance, specifically focused on the safeguarding of Controlled Unclassified Information (CUI). The effort involves assisting the prime contractor with implementing required security controls, conducting gap assessments, preparing documentation, and ensuring adherence to CMMC framework standards to meet Department of Defense cybersecurity requirements. The work is aligned with NAICS code 541512, indicating it falls under computer systems design and related services, and is structured as a subcontract to support broader defense contracting obligations. This subcontract is tied to performance at Hill Air Force Base with ZIP code 84056-5734 and was posted on August 9, 2026, with a response deadline of August 17, 2026. The acquiring agency is the Department of Defense, specifically under the ASC SUPPLIER OPER AE AND AF DIV, indicating this effort is part of a broader defense supply chain modernization and cybersecurity enhancement initiative. The subcontractor must possess demonstrated expertise in CMMC Level 2 implementation, knowledge of NIST SP 800-171 controls, and experience working within defense contracting environments to ensure the prime contractor meets all assessment and certification prerequisites within the established timeline.

ASC SUPPLIER OPER AE AND AF DIV

POSTED

DEADLINE

Covered Defense Information (CDI) SafeguardingThe contract requires implementation and maintenance of NIST SP 800-171 cybersecurity controls across systems handling Covered Defense Information, ensuring compliance with Department of Defense standards for protecting sensitive unclassified data. This includes developing and maintaining a System Security Plan that documents all implemented controls, procedures, and organizational responsibilities, as well as preparing for and sustaining readiness for official DOD assessments to validate compliance. The work must be performed at the designated location in New Cumberland, Pennsylvania, with a strict deadline for response by August 20, 2026, and the solicitation was posted on August 9, 2026. The NAICS code 541512 indicates the work relates to computer systems design services, aligning with the technical scope of cybersecurity implementation. This is a subcontract opportunity under the Department of Defense’s Construction & Equipment MRO SVC I contract vehicle, emphasizing the need for qualified vendors to support defense infrastructure with secure information handling practices.

CONSTRUCTION & EQUIPMENT MRO SVC I

POSTED

DEADLINE

Cybersecurity Compliance for Covered Defense Information (CDI)This contract requires the implementation of NIST Special Publication 800-171 controls and full compliance with DFARS clause 252.204-7012 to protect covered defense information handled during performance. The subcontractor must establish and maintain a secure environment that meets federal requirements for safeguarding sensitive defense data, including implementing appropriate access controls, audit logging, incident reporting, and system integrity measures. Compliance is mandatory for all systems and processes handling covered defense information, with failure to meet requirements potentially resulting in contract termination or penalties. The contract falls under NAICS code 541512 for computer systems design services and is associated with the Department of Defense’s Land Supply Chain organization. Performance is to take place at Fort Bliss, TX 79918-0000, and the agreement is structured as a subcontract. The solicitation was posted on August 9, 2026, with responses due by August 20, 2026. The contractor is expected to demonstrate operational readiness and ongoing adherence to cybersecurity standards throughout the contract period, ensuring that all technical, administrative, and physical safeguards prescribed by NIST and DFARS are fully integrated and auditable.

POSTED

DEADLINE

Cybersecurity Compliance for Covered Defense Information (CUI)The contract requires the implementation of NIST SP 800-171 security controls to protect Covered Unclassified Information (CUI) and ensure compliance with DFARS 252.204-7012, which governs the safeguarding of controlled unclassified information in nonfederal systems. This subcontract is centered on establishing and maintaining a robust cybersecurity posture that meets federal standards for handling sensitive defense-related data, including proper access controls, audit logging, malware protection, configuration management, and incident response procedures. The contractor must be prepared to report any cyber incidents involving CUI in accordance with the mandated reporting timeline and procedures outlined in the DFARS clause. The contract is associated with the Department of Defense and will be performed at a location in Jacksonville, Florida, with a North American Industry Classification System code of 541512 indicating information technology services. The solicitation was posted on August 9, 2026, and responses are due by August 20, 2026. This subcontract does not specify any set-aside status and is part of a broader effort to enforce cyber resilience across the defense industrial base. Compliance is not optional; failure to implement the required controls or report incidents properly may result in contract termination or penalties.

POSTED

DEADLINE

Cybersecurity for Covered Defense Information (CDI)

MEDICAL SUPPLY CHAIN MD SURG FSF

POSTED

DEADLINE

CMMC Level 2 Cybersecurity ComplianceThe contract requires the implementation and ongoing maintenance of Cybersecurity Maturity Model Certification (CMMC) Level 2 controls across systems handling Covered Defense Information (CDI). This includes executing a full compliance assessment and achieving certification through a Certified Third-Party Assessment Organization (C3PAO) to ensure alignment with Department of Defense cybersecurity standards. The work must be performed at the designated place of performance in New Cumberland, Pennsylvania, with a response deadline for proposals set for August 20, 2026. The contract is classified as a subcontract under NAICS code 541512, indicating it falls within the category of Custom Computer Programming Services, and is issued by the Active Devices Division of the Department of Defense. Compliance with CMMC Level 2 requirements is mandatory, encompassing both technical and organizational safeguards to protect sensitive defense data throughout the system lifecycle.

ACTIVE DEVICES DIVISION

POSTED

DEADLINE

Cybersecurity Compliance for Controlled Unclassified Information

ACTIVE DEVICES DIVISION

POSTED

DEADLINE

Cybersecurity and CUI SafeguardingThe contract entails the implementation and ongoing maintenance of comprehensive cybersecurity controls to ensure compliance with CMMC Level 2 and NIST SP 800-171 standards for systems handling controlled unclassified information. The work is focused on safeguarding CUI within the operational environment at Robins Air Force Base, Georgia, under the Department of Defense’s Warner Robins organization. The contractor must establish, validate, and sustain a robust security posture that aligns with federal requirements, addressing technical, administrative, and physical controls necessary to protect sensitive data from unauthorized access, disclosure, or compromise. This is a subcontract opportunity with a NAICS code of 541512, indicating it pertains to computer systems design services. The solicitation was posted on August 9, 2026, with responses due by August 20, 2026, providing a tight window for qualified entities to submit proposals. Performance must be executed at the specified location in Robins AFB, and the contractor is expected to demonstrate proven experience in delivering CMMC and NIST compliance solutions, including documentation, auditing, and continuous monitoring capabilities. The absence of a set-aside designation means the opportunity is open to all eligible small and large businesses, with evaluation likely centered on technical capability, past performance, and compliance readiness.

POSTED

DEADLINE

Cybersecurity and Covered Defense Information SafeguardingThe contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information held by the contractor, ensuring compliance with Department of Defense cybersecurity standards. The scope includes establishing robust protective measures for CDI and fulfilling mandatory cyber incident reporting obligations as stipulated under DoD contractual requirements, with an emphasis on timely detection, response, and notification of security breaches. All activities must align with the technical and procedural expectations outlined in NIST SP 800-171 to ensure the integrity, confidentiality, and availability of sensitive defense data. This is a small business set-aside subcontract under NAICS code 541512, issued by the Maritime Supply Chain organization within the Department of Defense. The solicitation was posted on August 9, 2026, with proposals due by August 24, 2026, targeting small businesses exclusively as part of a total small business set-aside. The place of performance and contact details are not specified, but performance is expected to support DoD contract obligations regardless of location. Compliance with these cybersecurity requirements is critical for contract award and continued performance, and failure to meet NIST SP 800-171 standards may result in penalty, termination, or loss of eligibility for future DoD work.

MARITIME SUPPLY CHAIN

POSTED

about 7 hours ago

DEADLINE

in 15 days

View Details

More opportunities from Department Of Defense → ASC SUPPLIER OPER AE AND AF DIV

Same awarding agency

NAICS: 541611

New

DIBBS

Export Control & ITAR/EAR Compliance Support

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Technical Data & Configuration Management Support

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

First Article Testing (FAT) Services

POSTED

DEADLINE

Precision Panel Assembly Manufacturing

Sheet Metal Work Manufacturing

POSTED

DEADLINE

Hazardous Materials Compliance and LabelingThe contract requires the identification, classification, and application of hazard warning labels for hazardous components in compliance with regulatory standards, along with the preparation of Safety Data Sheets and the submission of labels prior to award. All work must adhere to federal guidelines for hazardous material handling and documentation, ensuring accurate and legally compliant labeling throughout the supply chain. The effort supports the Department of Defense's operational safety requirements and is tied to components delivered to Hill AFB, Utah, with a submission deadline of August 17, 2026. This is a subcontract under NAICS code 541690, indicating it involves other scientific and technical consulting services, with no set-aside designation specified.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

First Article Testing (FAT) ServicesThe contract requires the performance and documentation of First Article Testing for valve assemblies in full compliance with military and contractual specifications, with the successful submission of detailed test reports and physical samples as part of the delivery requirements. This work is critical to validating that the valve assemblies meet all design, performance, and quality criteria prior to full-scale production, ensuring readiness for military use. The testing must adhere to established standards and be thoroughly documented to provide traceability and confirmation of conformance. The opportunity is classified as a subcontract under NAICS code 541380, issued by the Department of Defense through the ASC SUPPLIER OPER AE AND AF DIV, with performance required at Hill Air Force Base, Utah, ZIP 84056-5734. The solicitation was posted on August 9, 2026, and responses are due by August 17, 2026. All applicants must be prepared to meet rigorous defense procurement protocols, delivering not only technical accuracy but also strict adherence to timelines and documentation standards mandated by the federal defense supply chain.

Testing Laboratories and Services

POSTED

DEADLINE

Valve Assembly Manufacturing and SupplyThe contract seeks the manufacture and delivery of seven units of Charging Valve Assembly, identified by NSN 1430009075947, under strict adherence to military quality, packaging, and marking standards. The work is classified as a subcontract with a solicitation response deadline of August 17, 2026, and was posted on August 9, 2026. The North American Industry Classification System code is 332912, indicating the work falls under Other Fabricated Metal Product Manufacturing. The performance location is designated as Hill Air Force Base, with a zip code of 84056-5734, and the contracting activity is managed by the ASC SUPPLIER OPER AE AND AF DIV under the Department of Defense. All units must meet exacting defense specifications, and compliance with military requirements is mandatory for acceptance.

Fluid Power Valve and Hose Fitting Manufacturing

POSTED

DEADLINE

Quality Inspection and AQL VerificationThis contract entails the independent inspection and verification of kit attributes against specified Acceptable Quality Level standards, with critical defects governed by AQL 0.1 at Inspection Level VII, major defects by AQL 1.0 at Level IV, and minor defects by AQL 4.0 at Level II. The work requires rigorous adherence to statistical sampling protocols to ensure compliance with military-grade quality expectations, emphasizing precision in identifying and classifying defects across all components of the supplied kits. The solicitation is classified as a subcontract under NAICS code 541330, indicating it falls within the scope of scientific and technical consulting services, and is being managed by the ASC SUPPLIER OPER AE AND AF DIV under the Department of Defense. The opportunity was posted on August 9, 2026, with a response deadline of August 17, 2026, providing a limited window for qualified entities to submit proposals. Performance location details are not specified, and no set-aside status is indicated, suggesting the contract is open to all eligible subcontractors. The point of contact information is not included, and inquiries must be directed through the provided DIBBS portal link to access the full solicitation. Participation requires a thorough understanding of AQL methodologies and the ability to execute inspected audits under strict defense procurement protocols.

POSTED

DEADLINE

Military-Grade Packaging and MarkingThe contract requires the packaging and marking of an electronic kit in strict compliance with MIL-STD-129 and DLA RP001 standards, ensuring all labeling, identification, and palletization meet Department of Defense shipment specifications. This includes accurate and durable markings for inventory control, traceability, and logistical handling throughout the defense supply chain, with all units to be properly secured on pallets for transport. The work is solicited as a subcontract under NAICS code 493190, indicating it falls within other support activities for transportation, and is managed by the ASC SUPPLIER OPER AE AND AF DIV under the Department of Defense. The solicitation was posted on August 9, 2026, with responses due by August 17, 2026, and performance location details are unspecified, implying fulfillment may occur at the vendor’s facility prior to shipment to DoD destinations.

Other Warehousing and Storage

POSTED

DEADLINE

Hazardous Materials Compliance & LabelingThe contract titled Hazardous Materials Compliance & Labeling requires strict adherence to OSHA HAZCOM standards and DFARS requirements for the identification, handling, and labeling of hazardous components. All applicable hazard warning labels must be correctly applied in accordance with 29 CFR 1910.1200 to ensure regulatory compliance across all handling and storage procedures. The work is structured as a subcontract under NAICS code 541690 and is managed by the Department of Defense through its ASC SUPPLIER OPER AE AND AF DIV. The solicitation was posted on August 9, 2026, with a response deadline of August 17, 2026, and performance is expected to occur at an unspecified location under the jurisdiction of the contracting agency. Proper documentation and labeling practices are critical to meet federal safety and procurement mandates.

Other Scientific and Technical Consulting Services

POSTED

about 7 hours ago

DEADLINE

in 8 days

View Details