Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires the implementation and ongoing maintenance of all NIST SP 800-171 security controls to safeguard covered defense information handled by the contractor. Compliance with these controls is mandatory to ensure the confidentiality, integrity, and availability of sensitive data, and the contractor must establish processes to detect, report, and respond to cyber incidents in accordance with clause 252.204-7012. This includes timely reporting of any incidents involving unauthorized access, loss, or compromise of covered defense information to the appropriate government authorities within defined timeframes. This is a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, with performance taking place at FPO 96595-0004. The North American Industry Classification System code 541512 indicates the work involves computer systems design and related services. The solicitation was posted on July 16, 2026, with a response deadline of July 22, 2026, and is accessible via the DIBBS procurement portal. The contractor must ensure full alignment with federal cybersecurity standards and maintain audit-ready documentation at all times to demonstrate continuous compliance.