Cybersecurity for Covered Defense Information (CDI)

The contract requires implementation and maintenance of cybersecurity protections for systems handling Covered Defense Information, with strict adherence to NIST SP 800-171 standards. Contractors must establish and sustain security controls to safeguard sensitive government data, ensure timely incident reporting, and maintain continuous compliance throughout the performance period. All systems and processes must align with federal cybersecurity requirements to mitigate risks associated with data breaches and unauthorized access. This is a small business set-aside subcontract under the SBA’s Total Small Business Set-Aside program, with a NAICS code of 541512 for computer systems design services. The performance location is listed as Goulds, Florida, with a response deadline of July 13, 2026, and the solicitation was posted on June 30, 2026. The contracting entity is under the Department of Defense, specifically the FA2823 AFTC PZIO office, and the work is expected to be executed by a small business entity capable of meeting rigorous cybersecurity compliance obligations without deviation.