Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires implementation of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information and ensure compliance with DFARS 252.204-7012, mandate for contractors handling Covered Defense Information. This includes establishing and maintaining appropriate technical, administrative, and physical safeguards to protect CUI, as well as establishing procedures for timely cyber incident reporting and completing a self-assessment based on the NIST 800-171 requirements. Documentation of the assessment and ongoing compliance activities must be maintained and made available upon request. The work is a subcontract under the Department of Defense, specifically tied to the Maritime Supply Chain, with performance required at New Cumberland, Pennsylvania, zipcode 17070-5002. The NAICS code 541612 indicates the nature of the effort relates to computer systems design services, suggesting the focus is on technical implementation and integration of security controls. The solicitation was posted on July 23, 2026, with responses due by August 3, 2026, and bidders must demonstrate capability to meet all federal cybersecurity requirements for defense contractors handling sensitive government data.