Cybersecurity for Covered Defense Information (CDI)

This contract mandates the implementation of NIST SP 800-171 security controls to safeguard Covered Defense Information (CDI) throughout the duration of the subcontract. The contractor is responsible for establishing, maintaining, and updating a comprehensive System Security Plan that aligns with NIST guidelines to ensure the confidentiality, integrity, and availability of CDI. Continuous compliance with these controls is required, including the prompt reporting of any cybersecurity incidents that may compromise protected information. The contract falls under the NAICS code 541512, indicating it is related to computer systems design services, and is administered by the Defense Logistics Agency under the Department of Defense. Performance is expected to occur without geographic restriction, and the subcontracting nature implies integration within a broader defense contracting framework requiring strict adherence to federal cybersecurity standards.