Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST Special Publication 800-171 to safeguard covered defense information processed, stored, or transmitted within contractor systems. These controls are mandatory for ensuring the confidentiality, integrity, and availability of sensitive data as defined by Department of Defense requirements, and must be continuously monitored, assessed, and updated to meet evolving threats and compliance standards. The contractor is responsible for fully integrating these controls into all relevant information systems and maintaining documented evidence of compliance at all times. This is a subcontract under the Defense Logistics Agency, part of the Department of Defense, and falls under the NAICS code 541512 for computer systems design services. The work must be performed in compliance with federal cyber requirements, though the specific place of performance is not specified. The contract was posted on June 24, 2026, and is accessible via the DIBBS system under contract number SPE7M026V3422. The contractor must remain in full alignment with NIST 800-171 standards throughout the contract duration, with no tolerance for noncompliance that may expose covered defense information to unauthorized access or disclosure.