Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information against unauthorized access, disclosure, or compromise. Compliance with these controls is mandatory to meet federal cybersecurity standards for handling sensitive defense data. Additionally, the contractor must establish processes to detect, report, and respond to cyber incidents within a strict 72-hour window, as stipulated by the DFARS clause 252.204-7012, ensuring timely notification to appropriate government authorities. The work is performed under a subcontract, with performance located in Texarkana, Texas, 75507-5000, and is categorized under NAICS code 541512 for computer systems design services. The solicitation was posted on July 22, 2026, with responses due by July 30, 2026, through the DLA Dibbs platform.