Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires implementation of NIST SP 800-171 controls to protect Covered Defense Information (CDI) and ensure compliance with DFARS clauses 252.204-7012 and 252.240-7997, establishing a framework for securing sensitive defense data throughout the subcontract lifecycle. The work must be performed at Fort Hood, Texas, with a specific focus on meeting federal cybersecurity standards for contractors handling CDI, emphasizing access control, audit and accountability, system and communications protection, and incident response under the NIST guidelines. This is a subcontract solicitation under NAICS code 541612, which pertains to management consulting services, and is issued by the Department of Defense through the Land Supply Chain division. The solicitation was posted on July 30, 2026, with a required response deadline of August 10, 2026, indicating a tight turn-around for proposers to demonstrate technical capability, compliance readiness, and implementation plans for the required cybersecurity controls. Proposers must fully understand and commit to the ongoing obligations of DFARS compliance, including reporting cyber incidents, maintaining documentation, and ensuring their systems meet the NIST framework without exception.