Cybersecurity for Covered Defense Information (CDI)

This contract requires the implementation and ongoing maintenance of cybersecurity safeguards to protect Covered Defense Information (CDI) in full alignment with NIST SP 800-171 standards and DFARS regulatory requirements. The contractor must establish and sustain a robust security posture that includes conducting system assessments, ensuring compliance with all controlled unclassified information handling procedures, and promptly reporting any cyber incidents that compromise CDI. The performance of these obligations is tied to a subcontract under the Department of Defense’s Fluid Handling Division, with work to be performed at an FPO location identified by the zip code 96662. The solicitation, which is open for responses until August 10, 2026, targets organizations with expertise in defense cybersecurity and is classified under NAICS code 541512 for computer systems design services. Compliance is non-negotiable and must be continuously verified through documented controls and incident response protocols.