Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires implementation and maintenance of NIST SP 800-171 security controls to safeguard Covered Defense Information (CDI) and ensure full compliance with DFARS 252.204-7012, which mandates specific cyber incident reporting procedures. This subcontract is focused on establishing a robust cybersecurity posture aligned with federal defense standards, ensuring that all systems handling CDI are protected against unauthorized access, disclosure, or compromise. The contractor must demonstrate ongoing adherence to the specified controls and be prepared to report any cyber incidents in accordance with DOD requirements. The solicitation is tied to the NAICS code 541512, indicating it is related to computer systems design services, and is managed by the Department of Defense under the San Diego office. Performance is required at a location in San Diego, California, with a zip code of 92136-3581. The contract was posted on August 7, 2026, and responses are due by August 17, 2026. This engagement is categorized as a subcontract, meaning the vendor will likely work under a prime contractor or larger defense program, and the focus is strictly on achieving and sustaining cybersecurity compliance rather than on system development or product delivery.