Cybersecurity Compliance for Covered Defense Information (CDI)

This contract focuses on ensuring cybersecurity compliance for Covered Defense Information (CDI) by implementing and maintaining the security controls outlined in NIST SP 800-171. The contractor is responsible for conducting regular self-assessments to verify adherence to these standards and must report any cyber incidents within 72 hours, underscoring the emphasis on timely threat detection and response. The contract is structured as a subcontract and is designated as a Total Small Business Set-Aside under SBA regulations, indicating that only small businesses are eligible to participate. The contract is issued by the Department of Defense, specifically through the W071 Endist office in Seattle, with the place of performance listed as Enumclaw. It falls under the NAICS code 541512, which pertains to computer systems design services. The solicitation was posted on May 19, 2026, with a response deadline of June 3, 2026. This opportunity reflects the DoD’s ongoing commitment to safeguarding sensitive defense-related information through rigorous cybersecurity practices aligned with established federal standards.