Cybersecurity and Covered Defense Information Safeguarding

The contract requires the implementation and assessment of NIST SP 800-171 controls to protect covered defense information in accordance with DFARS 252.240-7997 and 252.204-7012, ensuring full compliance with federal cybersecurity standards for contractor systems handling sensitive defense data. This subcontract focuses on establishing a robust security framework that aligns with NIST guidelines to mitigate risks and maintain the integrity, confidentiality, and availability of covered information throughout its lifecycle. The work is to be performed in San Diego, California, under the auspices of the Defense Logistics Agency, a component of the Department of Defense, and is classified under NAICS code 541512 for computer systems design services. The solicitation closed on July 23, 2026, following a posting date of July 12, 2026. While no set aside or specific organization type is designated, the contractor is expected to demonstrate proven experience in cybersecurity implementation and assessment within defense-contracted environments, with all activities centered on achieving and sustaining compliance with mandatory regulatory requirements.