Cybersecurity for Covered Defense Information (CDI)

This contract requires the implementation of NIST SP 800-171 controls to safeguard Covered Defense Information (CDI) in compliance with DFARS requirements. The scope includes conducting system assessments to verify the effectiveness of security controls, maintaining thorough documentation to demonstrate adherence to standards, and establishing robust incident reporting procedures to address and respond to cybersecurity events promptly. All activities must align with federal cybersecurity frameworks governing defense contractor obligations, ensuring that sensitive data is protected throughout its lifecycle. The contract is classified as a subcontract under NAICS code 541512 and is sponsored by the Department of Defense through the Medical Supply Chain MD Surg FSF. It was posted on August 2, 2026, with a response deadline of August 10, 2026. No specific place of performance or set-aside type is indicated, and the work may be performed remotely or at designated sites as required by the contractor’s operational environment. Failure to meet the outlined cybersecurity obligations could result in non-compliance penalties and potential termination of contractual obligations.