Cybersecurity & CUI Protection for Subcontractors

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information handled by subcontractors, ensuring full compliance with the cybersecurity requirements outlined in DFARS 252.204-7012. This includes establishing robust technical, administrative, and physical safeguards to protect controlled unclassified information and promptly reporting any cyber incidents that may compromise the integrity, confidentiality, or availability of such data. Compliance is mandatory and must be continuously monitored and documented throughout the contract lifecycle. The work is classified as a subcontract under NAICS code 541512, with performance centered in Tracy, California, at the zip code 95304-5000. The solicitation was posted on July 22, 2026, and responses are due by August 3, 2026. The contracting entity is the DLA Dist San Joaquin under the Department of Defense, which will oversee adherence to federal cybersecurity standards. All parties must align their cybersecurity posture to meet these regulatory obligations without exception, and failure to comply may result in contract penalties or termination.