Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires the implementation and documentation of NIST SP 800-171 security controls to protect covered defense information in alignment with DFARS requirements. This subcontract is tied to the Department of Defense and managed by the Defense Logistics Agency, focusing on ensuring that all cybersecurity measures meet federal standards for safeguarding sensitive defense data. The work involves assessing current security practices, applying the necessary technical and administrative controls outlined in NIST SP 800-171, and maintaining comprehensive documentation to demonstrate compliance throughout the contract period. The NAICS code 541512 indicates the work falls under computer systems design and related services, suggesting the contractor will provide specialized cybersecurity expertise rather than general IT support. Performance of the contract is not tied to a specific geographic location, allowing for remote or distributed execution as long as compliance obligations are fully met. The contract was posted in June 2026 and is structured as a subcontract, meaning the winning party will be working under a prime contractor or another entity contracted directly by the government. Continuous adherence to NIST controls and accurate recordkeeping are critical to fulfilling obligations and avoiding noncompliance penalties under DFARS clauses.