Regulatory Compliance and Data Management (CDI Handling)

This contract requires strict adherence to DFARS 252.204-7012 and NIST SP 800-171 standards for the secure handling of Covered Defense Information, encompassing both technical and logistics data. The subcontractor must implement comprehensive cybersecurity measures to protect sensitive information throughout its lifecycle, ensuring compliance with all required controls related to access, encryption, audit logging, Incident response, and system integrity. The scope of work is focused on safeguarding digital assets against unauthorized access, disclosure, or modification, with all activities tied directly to the management and processing of defense-related data under federal regulatory frameworks. Performance of this contract is mandated to occur at Joint Base Lewis-McChord, Washington, with a ZIP code of 98433-5000, and the solicitation was posted on July 30, 2026, with responses due by August 10, 2026. The NAICS code 541611 indicates that the work falls under Management Consulting Services, suggesting the subcontractor may be responsible for advising on, implementing, or auditing compliance processes rather than direct hardware or software development. As a subcontract under the Defense Logistics Agency, part of the Department of Defense, the contractor must align with DOD security policies and demonstrate the capability to operate within a highly regulated, high-assurance environment handling classified and controlled unclassified information.