Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires the implementation of NIST SP 800-171 cybersecurity controls to protect Covered Defense Information (CDI) and ensure compliance with the Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012. Key obligations include safeguarding sensitive defense-related information, reporting any cyber incidents promptly, and ensuring that these requirements flow down to subcontractors. The contract type is a subcontract under NAICS code 541512, associated with IT services, and is managed by the Department of Defense through the C and T Supply Chain agency. The solicitation was posted on May 19, 2026, with a response deadline of June 22, 2026. Though specific locations for performance and points of contact are not provided, the work centers on maintaining cybersecurity compliance essential for defense supply chains. Interested parties can access further details and submit responses via the designated DIBBS link.