Cybersecurity Compliance for Covered Defense Information (CDI)

This contract requires the implementation of NIST Special Publication 800-171 security controls to safeguard Covered Defense Information (CDI) as mandated under DFARS 252.204-7012, along with compliant reporting of any cyber incidents involving such information as outlined in DFARS 252.232-7010. The work is structured as a subcontract under the Department of Defense and must be performed at the specified location in Bremerton, Washington, with all system controls and incident response procedures fully aligned with federal cybersecurity standards for defense contractors. The solicitation targets organizations capable of meeting stringent CMMC-aligned requirements and enforcing continuous compliance with NIST 800-171 controls, including access control, audit logging, media protection, and incident response protocols. The response deadline is July 30, 2026, and the contract falls under NAICS code 541512 for computer systems design services, indicating a focus on technical infrastructure and cybersecurity integration. All subcontractors must demonstrate proven capability in handling sensitive defense data and maintaining audit-ready documentation for compliance verification.