Cybersecurity Compliance for Defense Contractors (CDI Safeguarding)

This contract requires the implementation and thorough documentation of NIST SP 800-171 controls to protect Covered Defense Information associated with pump manufacturing, design, and delivery records. The work entails establishing a robust cybersecurity framework aligned with federal standards to ensure the confidentiality, integrity, and availability of sensitive data handled throughout the defense supply chain. Compliance must be demonstrated through detailed records, policies, and procedural controls that meet or exceed the requirements outlined in the NIST publication, with all activities focused on safeguarding information critical to defense operations. The contract is structured as a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency Aviation office in Oklahoma City, and falls under the NAICS code 541512 for computer systems design services. Proposals are due by July 17, 2026, and performance is expected to support ongoing defense projects involving pump-related systems. While no specific set-aside designation is provided, the obligation to comply with NIST controls signifies a stringent security posture is mandatory, and successful contractors must be prepared to undergo rigorous evaluation of their cybersecurity practices. All deliverables must be fully documented to validate adherence to federal safeguarding requirements for controlled unclassified information in nonfederal systems.