Cybersecurity and Covered Defense Information (CDI) Safeguarding

The contract requires the implementation and thorough documentation of cybersecurity controls aligned with NIST SP 800-171 to safeguard Covered Defense Information throughout manufacturing and data handling processes. These controls must be fully integrated into operational workflows to ensure compliance with federal requirements for protecting sensitive defense data from unauthorized access, disclosure, or manipulation. The effort spans the entire lifecycle of CDI, from ingestion and processing to storage and transmission, with rigorous documentation to demonstrate adherence to each of the 110 control requirements outlined in the standard. Performance is to be delivered at the facility located in Tracy, California, with a response deadline of August 13, 2026, and the contract is classified as a subcontract under NAICS code 541512 for computer systems design services. The contracting activity falls under the Department of Defense, specifically the LSO Combat Vehicles and Armament office, indicating the work supports critical defense systems and equipment. All activities must be executed with strict attention to regulatory compliance, audit readiness, and continuous monitoring to maintain the integrity and confidentiality of the defense information handled.