Cybersecurity & Covered Defense Information Safeguarding

The contract requires implementation of NIST Special Publication 800-171 security controls to safeguard covered defense information on systems operated by the contractor, in alignment with DFARS clause 252.204-7012. All systems handling such information must be configured to meet the specified cybersecurity requirements, including access controls, audit logging, media protection, and system integrity measures, to ensure compliance with federal defense standards. The contractor is also responsible for establishing and maintaining procedures to detect, report, and respond to cyber incidents involving covered defense information, with mandatory reporting to the Department of Defense within prescribed timeframes. This subcontract is issued by the Defense Logistics Agency San Joaquin under NAICS code 541512 for information technology services and is performance-based at Tracy, California. Proposals must be submitted by August 3, 2026, and the work will involve full adherence to cyber defense protocols as mandated for defense contractors handling sensitive government data. The contractor must demonstrate capability to sustain ongoing compliance, track control implementation, and provide evidence of incident response readiness without relying on external federal infrastructure or support for daily operations.