Cybersecurity and CUI Compliance Support

The contract requires comprehensive cybersecurity support to ensure compliance with DFARS 252.204-7012, focusing on the protection of Covered Defense Information and adherence to NIST SP 800-171 standards for safeguarding Controlled Unclassified Information. This includes implementing technical, administrative, and physical safeguards to secure CDI throughout its lifecycle, as well as establishing processes for timely detection, reporting, and response to cyber incidents as mandated by federal regulations. The work must align with the full scope of requirements outlined in NIST SP 800-171, covering access control, awareness training, audit and accountability, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, physical protection, risk assessment, security assessment, system and communications protection, and system and information integrity. The contract is structured as a subcontract under the Department of Defense, specifically managed by the ACTIVE DEVICES DIVISION, with performance located in Tracy, California, at ZIP code 95304-5000. It falls under NAICS code 541512 for computer systems design services and has a response deadline of July 27, 2026, with the solicitation posted on July 16, 2026. Although no set-aside designation is specified, the subcontract is expected to demand strict adherence to federal cyber standards and may require documentation, certifications, and audit readiness to demonstrate compliance. The entity performing this work must be prepared to support ongoing compliance activities, including potential assessments and reporting to government authorities, ensuring continuous alignment with evolving DoD cybersecurity requirements.