Cybersecurity Compliance for Covered Defense Information (CDI)

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls to safeguard Controlled Unclassified Information (CUI) in accordance with Department of Defense standards. The contractor must ensure full compliance with the Supplier Performance Risk System (SPRS) requirements and is obligated to report any cyber incidents within 72 hours of discovery. The scope of work falls under the NAICS code 541512, indicating a focus on computer systems design services. Issued by the Defense Logistics Agency under the Department of Defense, this subcontract was posted on May 28, 2026, with a response deadline of June 3, 2026. The contract emphasizes the protection of Covered Defense Information (CDI) through stringent cybersecurity practices, making it critical for contractors to maintain robust information security measures. While specific location details and points of contact are not provided, the contract links directly to the official DLA procurement site for further reference.