Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information, ensuring compliance with federal cybersecurity standards for non-classified federal information systems. This includes continuous system monitoring, detection of security incidents, and mandatory reporting of any breaches or anomalies that could compromise the integrity, confidentiality, or availability of sensitive defense data. The contractor must establish and sustain a security posture aligned with the NIST framework, encompassing access control, audit and accountability, configuration management, identification and authentication, and other critical control families. This is a small business set-aside subcontract under the SBA’s Total Small Business Set-Aside program, designated for organizations classified as small businesses under NAICS code 541512, which pertains to custom computer programming services. The place of performance is specified as New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation was posted on July 22, 2026, with a response deadline of July 27, 2026, and is issued by the Department of Defense through the DDSP New Cumberland Facility. Contractors must be prepared to meet strict compliance timelines and demonstrate proven capability in securing federal contract information within a defense supply chain context.