Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires full implementation of NIST Special Publication 800-171 security controls to protect Covered Defense Information (CDI) and ensure compliance with DFARS 252.204-7012 regulations. This includes establishing, documenting, and maintaining technical and administrative safeguards to secure CDI at rest and in transit, as well as conducting a thorough system assessment to validate the effectiveness of implemented controls. The contractor must also develop and operationalize cyber incident reporting procedures aligned with DFARS requirements, ensuring timely identification, response, and reporting of any security breaches or anomalies affecting CDI to the appropriate Department of Defense authorities. Work under this subcontract is performed under the auspices of the Defense Logistics Agency, a component of the Department of Defense, with the place of performance designated as FPO, ZIP 96694. The solicitation, categorized under NAICS code 541512 for Computer Systems Design Services, is issued as a subcontract with a response deadline of August 10, 2026. All activities must be completed in accordance with federal cybersecurity mandates, and the contractor is expected to demonstrate ongoing compliance through consistent monitoring, documentation, and reporting practices to maintain the integrity and confidentiality of defense-related information.