Cybersecurity for Covered Defense Information (CDI)

The contract focuses on the implementation of security controls in accordance with NIST SP 800-171 to safeguard covered defense information (CDI). It mandates compliance with the Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012, which includes specific cyber incident reporting requirements. This ensures that the subcontractor maintains a high standard of cybersecurity to protect sensitive defense-related data from unauthorized access or cyber threats. Issued by the Department of Defense's Medical Supply Chain Management office (MD SURG FSF), the contract is identified under the NAICS code 541512, indicating it involves computer systems design services. The work will be performed at a location designated as FPO, with a postal code of 09592-4500. The solicitation was posted on May 27, 2026, with responses due by June 2, 2026, and is structured as a subcontract opportunity. The contract aims to enhance the cybersecurity posture within the defense supply chain through stringent implementation of federal security standards and timely reporting of cyber incidents.