Cybersecurity and Covered Defense Information Safeguarding

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to protect covered defense information, ensuring full compliance with DFARS 252.204-7012. This subcontract is focused on securing sensitive data handled by the contractor within the Department of Defense ecosystem, with specific emphasis on safeguarding information that is not classified but still requires protection under federal cybersecurity guidelines. The scope demands a rigorous, documented approach to control implementation including access controls, audit logging, media protection, and incident response capabilities, all tailored to meet the stringent requirements for handling defense-related data. Performance is to be carried out at the location in San Diego, California, ZIP 92135-7058, and the work falls under NAICS code 541512 for computer systems design services. The solicitation was posted on July 30, 2026, with a firm response deadline of August 7, 2026, indicating a short turnaround for interested parties to submit proposals. The contracting activity is managed by DLA Fleet Readiness Center Southwest under the Department of Defense, underscoring the mission-critical nature of the cybersecurity requirements. Compliance is non-negotiable, and failure to maintain the required controls may result in contract termination or penalties due to the sensitive nature of the covered defense information involved.