Cybersecurity Compliance for Covered Defense Information (CDI)

This contract requires the implementation of NIST Special Publication 800-171 security safeguards to protect covered defense information within the contractor’s systems, ensuring alignment with federal cybersecurity standards for sensitive military data. The contractor must develop a comprehensive System Security Plan that documents all security controls, their implementation status, and ongoing management procedures, while also establishing processes to detect, report, and respond to cyber incidents in accordance with DFARS 252.204-7012. All activities must be performed at the designated place of performance located at Laughlin Air Force Base, Texas, and must be completed in time to meet the contractual obligations tied to the subcontract’s deadline. The contract is issued under the Medical Supply Chain MD Surg FSF organizational unit within the Department of Defense, classified under NAICS code 541512 for Computer Systems Design Services, and is structured as a subcontract with no specific set-aside provisions. The contractor is expected to adhere strictly to federal cybersecurity mandates, including the timely reporting of any cyber incidents affecting covered defense information, without delay or deviation. This engagement demands technical expertise in cybersecurity frameworks, meticulous documentation practices, and full cooperation with DoD oversight requirements, with all work contingent on the terms defined under the referenced solicitation.