Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires the implementation and ongoing maintenance of NIST Special Publication 800-171 security controls to protect covered defense information within the designated environment. This includes establishing robust cybersecurity practices to ensure the confidentiality, integrity, and availability of sensitive data, as well as adhering to mandatory cyber incident reporting procedures in the event of a breach or compromise. Compliance with all applicable NIST 800-171 requirements is non-negotiable, and the contractor must be prepared to undergo regular system assessments to validate adherence to these standards. The work is scoped to support the Department of Defense’s objectives at the New Cumberland facility, with performance expected to occur at the specified location in Pennsylvania. This subcontract is issued under NAICS code 541512, indicating it is for computer systems design and related services, with a response deadline of August 3, 2026. The contracting activity is managed by the DDSP New Cumberland Facility under the broader authority of the Department of Defense. While no specific set-aside provisions are detailed, participants must ensure their capabilities align with the stringent cybersecurity mandates of NIST SP 800-171 and are prepared to demonstrate continuous compliance through documentation, monitoring, and response mechanisms. All activities must be conducted in accordance with federal cybersecurity regulations governing covered defense information, with failure to meet requirements potentially resulting in contract termination or remediation obligations.