Cybersecurity and Covered Defense Information Safeguarding

The contract requires the implementation of NIST SP 800-171 controls and compliance with DFARS 252.204-7012 to protect Covered Defense Information and establish the capability to report cyber incidents in accordance with Department of Defense standards. All cybersecurity measures must be fully operational to ensure the confidentiality, integrity, and availability of sensitive defense data processed, stored, or transmitted by the contractor. The contractor is obligated to maintain an active and documented security posture that aligns with federal requirements, including the ability to detect, respond to, and report cyber incidents within mandated timeframes. This subcontract, issued under NAICS code 541512 by the Department of Defense through its San Diego office, is performance-based with the primary place of performance located at 92136-3581. The solicitation was posted on July 30, 2026, with responses due by August 10, 2026, emphasizing a swift turnaround for qualified entities to demonstrate capability in meeting stringent cyber protection standards. The contract does not specify a set-aside designation and expects full compliance with all applicable cybersecurity regulations to support national defense information systems.