Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires implementation of NIST SP 800-171 security controls to safeguard Covered Defense Information and ensure compliance with cyber incident reporting obligations under DFARS 252.204-7012. This is a subcontract under a Total Small Business Set-Aside, meaning only small businesses are eligible to respond, and it is classified under NAICS code 541512 for custom computer programming services. The performance location is specified as Cape May Court House, New Jersey, with a zip code of 08641, and the contracting activity falls under the Department of Defense, specifically the FA4484 87 Cons Pk office. All work must be completed in accordance with federal cybersecurity standards to protect sensitive defense data and meet mandatory reporting requirements for any cybersecurity incidents. The solicitation was posted on June 24, 2026, with a firm response deadline of July 9, 2026, at 8:00 PM Eastern Time. Proposers must be prepared to demonstrate full compliance with NIST SP 800-171 controls, including authentication, access control, audit, and incident response measures tailored to the handling of CDI. The contract is structured to ensure that small business contractors meet the stringent cybersecurity expectations of the Department of Defense, and failure to implement the required controls or report incidents appropriately could result in non-compliance penalties or termination. All work is expected to be performed at the designated location, and proposers should ensure that their systems, personnel, and procedures are aligned with federal cybersecurity requirements prior to bidding.