Cybersecurity for Covered Defense Information (CDI)

The contract requires implementation and maintenance of NIST SP 800-171 controls to safeguard covered defense information, ensuring compliance with federal cybersecurity standards for protected data. All systems handling such information must be assessed for alignment with the control framework, and any cybersecurity incident must be reported to the appropriate government authority within 72 hours of discovery. Performance is tied to the location in Bremerton, Washington, with a zip code of 98314-6001, indicating the physical and operational scope of the work. This subcontract, classified under NAICS code 541512 for computer systems design services, is issued by the Department of Defense through the Maritime Supply Chain organization and is open for responses until July 6, 2026. The contractor is expected to sustain ongoing compliance, conduct regular evaluations, and maintain robust incident response procedures without delay.