Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires the implementation and maintenance of NIST SP 800-171 security controls across all systems that process, store, or transmit Covered Defense Information (CDI). This includes establishing robust cybersecurity practices to safeguard sensitive data in compliance with federal standards, ensuring that access controls, audit logging, system integrity, and data protection measures are fully operational and continuously monitored. The contractor must also establish and sustain capabilities for real-time cyber incident detection, timely reporting of security events to the appropriate government authorities, and adherence to incident response protocols as defined by DoD requirements. Performance is expected to occur at the New Cumberland facility with a ZIP code of 17070-5002, and the work is structured as a subcontract under the NAICS code 541512 for custom computer programming services. The solicitation was posted on July 9, 2026, with a mandatory response deadline of July 20, 2026. The contracting entity is the Department of Defense through the DDSP New Cumberland Facility, and the successful bidder must demonstrate proven experience in securing CDI environments and maintaining NIST 800-171 compliance throughout the lifecycle of the contract. All technical and procedural requirements must align with current DoD cybersecurity policy without reliance on external documentation or references.