Cybersecurity and Covered Defense Information Safeguarding

This contract requires the implementation of NIST SP 800-171 security controls to protect covered defense information and full compliance with DFARS 252.204-7012, which mandates robust cybersecurity measures and timely cyber incident reporting. The subcontractor must establish and maintain a secure environment that meets federal standards for safeguarding sensitive defense data, including administrative, technical, and physical controls aligned with NIST guidelines. Any cybersecurity incident involving covered defense information must be reported in accordance with specified timelines and procedures outlined in the DFARS clause. The contract is solicited under the NAICS code 541512 for computer systems design services and is managed by the ASC Commodities Division within the Department of Defense. Performance is required at a designated location in Tracy, California, with a zip code of 95304-5000. The solicitation was posted on August 4, 2026, and proposals must be submitted by August 12, 2026. The agreement is structured as a subcontract and does not include a set-aside designation, meaning it is open to all eligible offerors. All activities must comply with federal cybersecurity requirements to ensure the integrity, confidentiality, and availability of covered defense information.