Cybersecurity for Covered Defense Information (CDI) Safeguarding

This contract requires the implementation of robust cybersecurity safeguards for contractor information systems that handle covered defense information, in full compliance with NIST SP 800-171 and DFARS requirements. The scope centers on protecting sensitive data associated with the Nuclear Reactor Program under the Department of Defense, ensuring all applicable security controls are effectively deployed, monitored, and maintained across the contractor’s systems. Compliance is non-negotiable and must be demonstrated through documented policies, procedures, and technical configurations aligned with federal standards for information system security. The opportunity is structured as a subcontract with a response deadline of July 31, 2026, and is tied to performance at Hill AFB, Utah, with the primary NAICS code 541512 reflecting information technology and cybersecurity services. Contractors must be prepared to meet stringent federal cybersecurity obligations, including but not limited to access control, audit and accountability, configuration management, and incident response. Failure to adhere to the specified standards may result in contract non-compliance, financial penalties, or loss of eligibility for future defense-related work. All parties must ensure their systems and processes are fully aligned with the mandated framework prior to engagement.