Cybersecurity Compliance for Covered Defense Information

This contract involves the implementation of cybersecurity measures in accordance with NIST SP 800-171 standards to protect covered defense information (CDI) within relevant systems. A critical component of the contract is ensuring that these security controls are applied not only within the primary contractor’s operations but also extended to all subcontractors through appropriate flowdown requirements. Additionally, the contract stipulates procedures for cyber incident reporting to promptly address any security breaches or threats involving CDI. The contract is issued by the Department of Defense under the Subsistence FSE Supply Chain office and falls under NAICS code 541512, which corresponds to computer systems design services. It is structured as a subcontract with a response deadline set shortly after the posting date in May 2026. The exact location of performance and point of contact have not been specified. This effort aims to enhance the protection of sensitive defense-related information by ensuring compliance with federal cybersecurity mandates throughout the supply chain.