Cybersecurity Compliance for Covered Defense Information (CDI)

This contract requires the implementation and ongoing maintenance of cybersecurity controls outlined in NIST SP 800-171 to protect covered defense information handled under a subcontract with the Defense Logistics Agency. Compliance with these controls is mandatory under DFARS 252.204-7012, ensuring that all sensitive contract data transmitted, processed, or stored by the subcontractor is securely safeguarded against unauthorized access or disclosure. The subcontract falls under NAICS code 541512, indicating it involves computer systems design and related services, and is part of a broader Department of Defense procurement framework focused on securing defense-related information. The subcontractor must establish and sustain a robust cybersecurity program aligned with NIST standards, including but not limited to access controls, incident response, configuration management, and continuous monitoring. All activities under this contract must be conducted in strict adherence to federal cybersecurity requirements regardless of physical location, and failure to maintain compliance may result in contract termination or financial penalties. The contract was posted on June 9, 2026, and is linked to a specific DLA award with identification SPE60526FHFW5, underlining its formal integration into DOD’s contracting ecosystem.