Cybersecurity Compliance for Covered Defense Information (CDI)

This contract requires the implementation of NIST SP 800-171 controls to safeguard covered defense information and ensure adherence to mandated cyber incident reporting procedures. The subcontract is issued under the Department of Defense, specifically by the Defense Logistics Agency, and is focused on securing sensitive data handled by contractors operating within the defense supply chain. Compliance with the full suite of NIST controls is non-negotiable, covering areas such as access control, audit, configuration management, identification and authentication, and incident response, all aligned with federal requirements for protecting information processed, stored, or transmitted on nonfederal systems. Performance of the work is centered at PT MUGU NAWC with a zip code of 93042-5049, indicating a specific geographic location tied to defense operations. The solicitation is categorized under NAICS code 541512, which corresponds to custom computer programming services, suggesting the work involves technical implementation and integration of cybersecurity measures into existing systems. Responses must be submitted by August 7, 2026, with the opportunity posted in July 2026, leaving a short window for proposal preparation. This subcontract is not subject to a specific set-aside designation and is open to eligible parties capable of meeting the stringent NIST compliance standards and cyber incident reporting obligations mandated by federal defense policy.