Cybersecurity for Covered Defense Information (CDI)

This contract requires the implementation of NIST SP 800-171 security controls and comprehensive cyber incident reporting procedures to safeguard covered defense information in alignment with the DFARS 252.204-7012 clause. The effort centers on ensuring robust cybersecurity measures are in place to protect sensitive data transmitted, processed, or stored by the subcontractor, with strict adherence to federal requirements governing the handling of defense-related information. All applicable controls must be fully documented, operational, and continuously monitored to maintain compliance and mitigate potential threats to the integrity, confidentiality, and availability of covered defense information. The subcontract is solicited by the Defense Logistics Agency under the Department of Defense, with a NAICS code of 541512 indicating alignment with computer systems design services. Responses are due by July 30, 2026, and the performance location is not specified, implying work may occur at the contractor's facility or other authorized sites. The subcontractor is responsible for demonstrating capability to meet all cybersecurity obligations under DFARS 252.204-7012, including timely reporting of cyber incidents involving covered defense information to the Department of Defense. Noncompliance will result in contractual breaches, financial penalties, or loss of eligibility for future defense work.