Cybersecurity Compliance for Covered Defense Information (CDI)

The contract titled Cybersecurity Compliance for Covered Defense Information (CDI) requires the implementation and ongoing maintenance of NIST SP 800-171 controls to protect sensitive defense data handled by the subcontractor. This includes conducting a thorough system assessment to verify compliance with all required security controls and establishing processes for timely incident reporting in the event of a breach or security event. The work is critical to ensuring the integrity, confidentiality, and availability of covered defense information and is subject to strict adherence to federal cybersecurity standards. The contract is classified as a subcontract under NAICS code 541512 and is issued by the Fluid Handling Division of the Department of Defense. Performance is to take place at a location in Tracy, California, with a ZIP code of 95304-5000. The solicitation was posted on July 23, 2026, and responses are due by August 3, 2026. All activities must align with the Department of Defense’s cybersecurity requirements, and failure to meet compliance obligations could result in contract termination or penalties. The subcontractor must be prepared to demonstrate and document full adherence to NIST SP 800-171 throughout the contract term.