Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires the implementation and ongoing maintenance of cybersecurity safeguards aligned with NIST SP 800-171 to protect covered defense information stored on or transmitted through contractor systems. All technical and procedural controls must be fully deployed to meet the standard’s requirements for access control, configuration management, identification and authentication, audit and accountability, and incident response, ensuring the confidentiality, integrity, and availability of sensitive defense data. Continuous monitoring and documentation of compliance are mandatory, with immediate reporting of any cybersecurity incidents affecting covered defense information to the appropriate government authorities as stipulated by regulations. This is a total small business set-aside subcontract under the NAICS code 541512 for computer systems design services, issued by the Department of Defense’s Land Supply Chain. It is open only to small businesses certified by the SBA and has a response deadline of August 14, 2026. The place of performance and point of contact details are unspecified, but the work must be conducted in support of defense operations under federal cybersecurity mandates. The solicitation is available for review through the DIBBS portal, and all bidders must demonstrate proven capability in deploying and sustaining NIST 800-171 compliant environments prior to award.