Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls to safeguard Covered Defense Information (CDI) within a defined system environment. This includes conducting a thorough system assessment to identify gaps in current security posture, developing a comprehensive System Security Plan (SSP) that documents policies, procedures, and control implementations, and ensuring timely and accurate incident reporting in alignment with federal requirements. All activities must be performed to meet DoD standards and sustain compliance throughout the contract period. The work is to be conducted at a specific location in Bremerton, Washington, with a zip code of 98314-5001, and falls under NAICS code 541512 for computer systems design services. This is a subcontract solicitation issued by the ASC Commodities Division of the Department of Defense, with a response deadline of August 7, 2026, and a posted date of July 30, 2026. There is no specified set-aside type, and while the solicitation details are accessible via a public link, no point of contact information is provided within the data. Contract performance is directly tied to the successful execution of NIST 800-171 controls to protect sensitive defense information and maintain regulatory compliance.