Cybersecurity Compliance for Covered Defense Information (CDI)

The contract focuses on ensuring cybersecurity compliance for systems that handle Covered Defense Information (CDI) by implementing NIST SP 800-171 controls. It includes the development of a System Security Plan to document and manage security requirements, as well as establishing procedures for cyber incident reporting to address potential breaches or threats related to defense-related data. This initiative aims to protect sensitive information in accordance with Department of Defense standards. Issued by the ASC Commodities Division of the Department of Defense, the subcontract falls under the NAICS code 541512, which pertains to computer systems design services. The work is to be performed in New Cumberland, Pennsylvania, with a response deadline set for early June 2026. The contract ensures that contractors maintain robust cybersecurity practices for safeguarding CDI, which is critical for national security and defense operations.