Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires implementation of NIST SP 800-171 controls to safeguard Covered Defense Information (CDI) held by the contractor, ensuring all required cybersecurity measures are fully established and operational. Compliance must include robust mechanisms for identifying, reporting, and responding to cyber incidents, with a strict mandate that any confirmed incident be reported to the appropriate government authority within 72 hours of discovery. The work is classified as a subcontract under NAICS code 541512, focused on computer systems design services, and is administered by the Fluid Handling Division of the Department of Defense. Performance is to be conducted at the designated location in APO, zip code 96319-5014, with all activities tied to the fulfillment of defense-related cybersecurity obligations. The solicitation is open for responses until July 31, 2026, with the posting date on July 20, 2026, indicating a brief window for interested parties to submit proposals. The contract does not specify a set-aside status, making it open to all eligible contractors, and no point of contact information is provided in the data. The work scope centers on achieving and maintaining compliance with federal cybersecurity standards for protecting sensitive defense data, requiring technical expertise in NIST frameworks, incident response protocols, and secure systems architecture. Contractors must be prepared to demonstrate full adherence to the specified controls and provide verifiable proof of implementation and ongoing compliance throughout the subcontract term.