Cybersecurity Compliance – Safeguarding Covered Defense Information (CDI)

The contract requires the implementation and maintenance of cybersecurity controls to safeguard Covered Defense Information (CDI) in full compliance with DFARS 252.204-7012, ensuring that all systems handling sensitive defense data are properly protected against unauthorized access, disclosure, or compromise. This includes deploying technical, administrative, and physical safeguards as mandated by the regulation, along with establishing procedures for immediate reporting of any cyber incidents that may affect the integrity, confidentiality, or availability of CDI. The contractor must maintain continuous compliance with NIST SP 800-171 standards and be prepared to demonstrate adherence through audits or assessments at any time. Performance of this subcontract is to be carried out at Tobyhanna, Pennsylvania, with a response deadline of July 24, 2026, and the work falls under NAICS code 541512 for computer systems design services. The contracting activity is managed by the ASC Commodities Division under the Department of Defense, and the subcontractor is expected to function within the broader framework of defense supply chain security, with strict accountability for the protection of controlled unclassified information. No set-aside provisions are specified, meaning the opportunity is open to all qualified entities, and successful bidders must ensure their systems and processes align with federal cybersecurity requirements throughout the contract lifecycle.