Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires the implementation and assessment of NIST Special Publication 800-171 controls to protect covered contractor information systems handling covered defense information, ensuring full alignment with DFARS 252.204-7012 requirements. This includes establishing robust cybersecurity practices to safeguard sensitive data, conducting regular assessments of control effectiveness, and maintaining documentation to demonstrate compliance. All activities must be executed in accordance with federal guidelines for protecting information systems that process, store, or transmit covered defense information. The subcontract is tied to the Department of Defense, with performance located in New Cumberland, Pennsylvania, under the ACTIVE DEVICES DIVISION. The solicitation was posted on July 29, 2026, and responses are due by August 10, 2026. The NAICS code 541512 indicates the work falls under custom computer programming services, suggesting the contractor will likely provide cybersecurity implementation, assessment, or technical support services. Any security incidents involving covered defense information must be reported promptly in accordance with federal mandates, and the contractor must be prepared for potential audits or evaluations of their cybersecurity posture to ensure ongoing compliance.