Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires full implementation of NIST SP 800-171 security controls to ensure the protection of covered defense information as mandated by DFARS 252.204-7012. This includes developing a comprehensive System Security Plan that documents how all required security controls are applied, maintained, and verified within the organization’s information systems. The scope of work is focused on achieving compliance with federal cybersecurity standards for handling sensitive defense data, ensuring that all applicable technical, administrative, and physical safeguards are properly configured and documented. This subcontract is issued under the NAICS code 541512 for computer systems design services and is associated with the Department of Defense through the Maritime Supply Chain agency. The place of performance is designated as FPO with ZIP code 09587, indicating operations may involve overseas or mobile environments. Proposals must be submitted by the response deadline of July 16, 2026, with no set-aside provisions specified. The contract underscores the critical need for rigorous cyber hygiene and accountability in supporting defense-related information systems, requiring certified expertise in NIST and DFARS compliance frameworks.