Cybersecurity for Covered Defense Information (CDI)

The contract requires the implementation and maintenance of cybersecurity controls to protect covered defense information in contractor systems, in full compliance with DFARS 252.204-7012 and the National Institute of Standards and Technology Special Publication 800-171. These controls are designed to ensure the confidentiality, integrity, and availability of sensitive defense data processed, stored, or transmitted through contractor networks and systems. The work focuses on aligning security practices with federal standards to meet Department of Defense requirements for safeguarding information critical to national security. This is a subcontract under the Defense Logistics Agency, part of the Department of Defense, with a NAICS code of 541512 indicating it falls under custom computer programming services. The contract was posted on July 16, 2026, and performance is expected to occur across locations managed by the contractor, with no specific geographic limitations indicated. The subcontractor must establish, monitor, and continuously improve cybersecurity measures to meet evolving threat landscapes, ensuring ongoing compliance with all applicable regulatory requirements throughout the lifecycle of the agreement.