Cybersecurity and Covered Defense Information Safeguarding

The contract requires implementation of NIST SP 800-171 controls to safeguard covered defense information, ensuring compliance with cybersecurity standards mandated for contractors handling sensitive government data. All systems and processes must be configured to meet the specified security requirements and maintain continuous protection against unauthorized access, disclosure, or compromise. Additionally, any cyber incidents affecting covered defense information must be reported within 72 hours as stipulated by DFARS 252.204-7012, emphasizing timely response and transparency in the event of a security breach. This is a subcontract under the Department of Defense, specifically managed by the ASC Commodities Division, with performance required at a location in Tracy, California, zip code 95304-5000. The North American Industry Classification System code is 541512, indicating the work relates to custom computer programming services. The solicitation was posted on July 16, 2026, with responses due by July 24, 2026. Contractors must be prepared to demonstrate full alignment with NIST controls and incident reporting protocols prior to award and throughout contract performance.