Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires full implementation and documentation of NIST SP 800-171 controls to safeguard covered defense information against cyber threats, ensuring compliance with Department of Defense cybersecurity standards. This includes establishing technical and administrative safeguards, maintaining detailed records of control implementation, and preparing for official DoD assessments to verify adherence. The contractor must also establish robust procedures for identifying, reporting, and responding to cyber incidents in alignment with federal requirements, ensuring timely and accurate incident reporting to the appropriate authorities. Performance is expected to take place in Bremerton, Washington, with the primary objective of achieving and sustaining DoD assessment readiness. The work falls under NAICS code 541512 for computer systems design services and is structured as a subcontract under the Fluid Handling Division of the Department of Defense. Proposals must be submitted by August 17, 2026, with the solicitation posted on August 5, 2026. The contractor is expected to deliver comprehensive documentation demonstrating compliance across all applicable NIST SP 800-171 requirements, with no set-aside preferences indicated, and is accountable for meeting all readiness milestones prior to any formal DoD evaluation.