Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires the implementation and assessment of NIST SP 800-171 security controls to safeguard Covered Defense Information and ensure compliance with DFARS cyber incident reporting obligations. All submitted solutions must align with the specified cybersecurity framework to protect sensitive data handled under Department of Defense contracts, with a focus on meeting rigorous technical and procedural standards. The work is scoped as a subcontract and must be fully executed by the stated deadline, with performance taking place at Fort Drum, New York, at the ZIP code 13602-5000. This solicitation is categorized under NAICS code 541512, indicating a focus on computer systems design and related services, and is issued under the Aviation Supply Chain ESOC Buys organization within the Department of Defense. The contract posting date is August 2, 2026, with responses due by August 10, 2026. All proposers must demonstrate proven capability in deploying and validating NIST 800-171 controls, maintaining audit readiness, and responding to cyber incidents in accordance with federal defense regulations. Compliance is mandatory and will be rigorously assessed as part of contract award and performance evaluation.