Cybersecurity Compliance for Covered Defense Information (CDI)

This contract requires the implementation of NIST Special Publication 800-171 controls to protect covered defense information as mandated by DFARS 252.204-7012, ensuring that all systems handling such information meet rigorous cybersecurity standards. The subcontractor must establish and maintain appropriate technical, administrative, and physical safeguards to prevent unauthorized access, disclosure, or loss of sensitive data, while also establishing procedures for timely cyber incident reporting in accordance with federal requirements. Compliance is non-negotiable and must be fully operational prior to any handling of covered defense information under this agreement. The work is classified as a subcontract under the NAICS code 541512, associated with the Department of Defense’s Medical Supply Chain Pharm FSA, with performance to occur at the FPO address with ZIP code 09570. Proposals must be submitted by the deadline of August 5, 2026, and the contract is not subject to any specific set-aside provisions. While the point of contact details are not provided, all responses must align with the technical and regulatory expectations outlined in the DFARS clause and NIST framework, with failure to comply potentially resulting in termination or liability. The solicitation is accessible through the specified DIBBS link for further submission details.