Cybersecurity Compliance for Covered Defense Information (CDI)

The contract entails the implementation and ongoing maintenance of cybersecurity controls to ensure compliance with NIST Special Publication 800-171 and the Defense Federal Acquisition Regulation Supplement clause 252.204-7012, specifically for the protection of Covered Defense Information. This includes conducting a System Security Plan Review Scorecard assessment to evaluate and document the organization’s adherence to required cybersecurity standards, as well as establishing and executing protocols for timely incident reporting in accordance with federal defense requirements. The work must be performed at Kirtland Air Force Base, New Mexico, under a subcontract arrangement, and all activities are governed by the North American Industry Classification System code 541512, indicating a focus on computer systems design services. The solicitation is open for responses until August 6, 2026, and the contract is managed by the Defense Logistics Agency under the Department of Defense. The contractor is responsible for achieving and sustaining a compliant security posture across systems handling sensitive defense data, with expectations to document and validate controls, respond to assessment findings, and maintain continuous readiness for audits and incident response. No set-aside classification is specified, and the award will be made under standard subcontracting procedures without restrictions based on business size or type.