Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires the implementation of NIST SP 800-171 security controls to protect Covered Defense Information (CDI) in accordance with DFARS requirements, ensuring that all applicable cybersecurity standards are fully integrated into the contractor’s systems and processes. This includes conducting a comprehensive self-assessment of compliance with the control requirements and establishing procedures for timely reporting of any cyber incidents that impact CDI, as mandated by federal defense contractual obligations. The work is scoped as a subcontract under the Department of Defense, with performance taking place at APO 09094-3219, and must be completed by the response deadline of August 10, 2026. The NAICS code 541512 indicates the nature of the work involves computer systems design and related services, focusing on cybersecurity implementation and assessment activities. Compliance is non-negotiable and will be subject to verification and potential audit by the contracting authority.