Cybersecurity & Covered Defense Information Safeguarding

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to protect covered defense information stored in or transmitted by contractor systems. This subcontract, issued under the Department of Defense and managed by the Active Devices Division, mandates strict adherence to federal cybersecurity standards to ensure the confidentiality, integrity, and availability of sensitive defense data. The place of performance is designated as Tracy, California, with a ZIP code of 95304-5000, indicating where the work must be physically executed or managed. The NAICS code 541512 classifies this as computer systems design and related services, pointing to a technical, IT-focused scope of work. Responses are due by August 10, 2026, following a posting date of July 30, 2026, providing a narrow window for interested parties to submit proposals. The contract does not specify a set-aside designation, meaning it is open to all eligible contractors regardless of business size or status. Compliance with NIST 800-171 controls is non-negotiable, requiring robust policies, access management, audit logging, incident response planning, and continuous monitoring capabilities. The work will involve not only initial system hardening but also long-term maintenance, audits, and potential reporting to demonstrate continued compliance throughout the contract lifecycle. All activities must be conducted in accordance with Department of Defense cybersecurity requirements, ensuring that covered defense information remains secure against evolving threats.