Cybersecurity Compliance for Covered Defense Information (CDI)

This contract requires the implementation of NIST SP 800-171 security controls and the establishment of cyber incident reporting procedures as mandated by DFARS 252.204-7012 to safeguard Covered Defense Information. The work is scoped to ensure that all systems handling such information meet federal cybersecurity standards, including access controls, audit logging, configuration management, and timely reporting of any security breaches or anomalies. Compliance must be thoroughly documented and maintained throughout the contract performance period to remain eligible for continued performance under the Department of Defense’s supply chain requirements. The contract is a subcontract under the MARITIME SUPPLY CHAIN ESOC BUYS agency, with performance located at FORT STEWART, Georgia, 31314-0000. It falls under NAICS code 541512 for computer systems design services and was posted on August 5, 2026, with responses due by August 17, 2026. All parties must align their cybersecurity practices with the specified regulatory framework, ensuring that contractor systems are properly configured, monitored, and resilient against threats to Covered Defense Information. Failure to meet these requirements may result in contract termination or financial penalties.