Cybersecurity and Covered Defense Information (CDI) Safeguarding

The contract requires the implementation and maintenance of cybersecurity controls to safeguard Covered Defense Information in full compliance with NIST SP 800-171 and applicable DFARS requirements. This subcontract is focused on ensuring that all systems and processes handling CDI are secured according to federal standards designed to protect sensitive government data from unauthorized access, disclosure, or compromise. The contractor must establish, document, and sustain a robust cybersecurity posture aligned with the specific controls outlined in NIST SP 800-171, including access control, audit, configuration management, identification and authentication, and incident response measures. Performance of this contract is centered at Tracy, California, with a zip code of 95304-5000, and the work falls under NAICS code 541512 for computer systems design services. The solicitation was posted on August 4, 2026, and responses are due by August 12, 2026, indicating a tight turnaround for proposers to demonstrate technical readiness and compliance capability. The contracting activity is under the Department of Defense, specifically the ASC SUPPLIER OPER OEM DIVISION, and the subcontractor must be prepared to provide evidence of compliance, maintain documentation for potential audits, and respond proactively to evolving cybersecurity threats while operating within the defined scope of protecting CDI throughout the contract lifecycle.