Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires the implementation of NIST SP 800-171 controls to protect covered defense information, ensuring that all relevant cybersecurity requirements are fully integrated into the contractor’s systems and processes. This includes maintaining comprehensive documentation of control implementation and performing an annual self-assessment to verify compliance, with results submitted as part of ongoing contractual obligations. The work must be performed at the designated location in New Cumberland, Pennsylvania, with the contractor expected to adhere strictly to the security standards outlined in the NIST framework to safeguard sensitive defense data. This subcontract is issued under the Department of Defense, specifically by the Active Devices Division, and is classified under NAICS code 541512, indicating it relates to computer systems design services. The solicitation was posted on July 16, 2026, with a response deadline of July 27, 2026, leaving a limited window for interested parties to submit proposals. There is no set-aside designation specified, meaning the contract is open to all eligible vendors regardless of business size or status. The successful proposer must be prepared to demonstrate immediate capability to meet NIST 800-171 requirements and sustain compliance through continuous monitoring and annual reassessment.