Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires the implementation of NIST SP 800-171 controls to protect covered defense information within manufacturing and logistics operations, ensuring alignment with Cybersecurity Maturity Model Certification readiness requirements. This subcontract is focused on securing sensitive information handled across the supply chain by establishing robust cybersecurity practices that meet federal standards for safeguarding controlled unclassified information in nonfederal systems. The performance location is specified as Mechanicsburg, Pennsylvania, with a zip code of 17050-2411, indicating the operational scope is tied to this geographic area. The solicitation is classified under NAICS code 541512, which corresponds to custom computer programming services, reflecting the technical nature of the compliance efforts required. The contract is issued by the Department of Defense under the ASC SUPPLIER OPER AE AND AF DIV, with a deadline for responses set for August 11, 2026, and publicly posted on August 3, 2026. The effort is not subject to any specific set-aside classification, and while no point of contact is provided, interested parties can access additional details through the referenced DIBBS portal link. Compliance with these controls is essential for maintaining eligibility in defense contracting and supporting the broader DoD objective of securing the industrial base against evolving cyber threats.