Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires the implementation of cybersecurity controls aligned with NIST SP 800-171 and compliance with DFARS 252.204-7012 to protect Covered Defense Information handled by the contractor. This includes establishing and maintaining a robust security framework to safeguard sensitive data within systems and networks, ensuring all required access controls, audit capabilities, media protection, personnel security, and system integrity measures are fully operational. The contractor must also be prepared to report any cyber incidents affecting Covered Defense Information in accordance with specified timelines and procedures outlined in the regulation. This subcontract is issued under the Department of Defense’s Defense Logistics Agency, with performance required at Wadeboro, North Carolina, under NAICS code 541512 for computer systems design services. The solicitation was posted on August 2, 2026, with responses due by August 13, 2026, and is open to eligible subcontractors participating in defense-related supply chains. Compliance is mandatory and subject to verification, with failure to meet requirements potentially resulting in contract termination, penalties, or loss of eligibility for future DoD work.