Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires implementation of NIST SP 800-171 security controls across systems that process, store, or transmit Covered Defense Information (CDI), ensuring compliance with Department of Defense cybersecurity requirements. The work involves preparing for and completing a formal DoD assessment to validate that all specified controls are properly established, operational, and documented, with a focus on safeguarding sensitive defense data from unauthorized access or disclosure. The subcontract is tied to the NAICS code 541512, indicating it involves computer systems design and related services, and the performance location is designated as New Cumberland, PA, with a zip code of 17070-5002. The solicitation is set to close on July 31, 2026, and was posted on July 28, 2026, indicating a narrow window for response and preparation. The contracting agency is the Department of Defense under LSO Combat Vehicles and Armament, underscoring the critical nature of the work in supporting defense systems. Compliance with NIST SP 800-171 is mandatory, and any failure to meet the required controls could result in disqualification or contract termination. The nature of the subcontract suggests the awardee will work under a prime contractor to support a larger defense program, and successful implementation must align with DoD standards for protecting CDI in nonfederal information systems.