Cybersecurity & Controlled Unclassified Information (CUI) Safeguarding

The contract requires implementation of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information (CUI) in alignment with DFARS 252.204-7012, ensuring that all required protections are in place to prevent unauthorized access, disclosure, or loss of sensitive government data. The contractor must establish and maintain a robust cybersecurity posture that meets the technical, administrative, and physical requirements outlined in the NIST framework, with the added responsibility of preparing for and supporting a CMMC Level 2 self-assessment to validate compliance with the Cybersecurity Maturity Model Certification standards. This includes documenting policies, conducting internal audits, training personnel, and ensuring continuous monitoring and improvement of security practices. All work under this subcontract is to be performed at the designated place of performance in Tracy, California, with a response deadline of August 6, 2026, and the solicitation is classified under NAICS code 541512 for computer systems design services. The contracting entity is the Department of Defense through the Land Supply Chain organization, indicating that the deliverables directly support defense-related operations and supply chain security objectives. Compliance with these cybersecurity mandates is mandatory, and failure to meet the requirements may result in contract termination or loss of eligibility for future DoD opportunities.