Cybersecurity & CUI Safeguarding Compliance

The contract requires the implementation of NIST SP 800-171 security controls to protect covered defense information and ensure full compliance with DFARS 252.204-7012. This includes developing a comprehensive System Security Plan that documents how the required safeguards are applied across systems handling controlled unclassified information. The contractor must establish processes for timely detection, reporting, and response to cybersecurity incidents involving covered defense information, in alignment with federal mandates. All activities must be conducted in accordance with the designated place of performance in Alameda, CA, while adhering to the strict deadlines and obligations outlined in the subcontract agreement. This is a subcontract under the Department of Defense, categorized under NAICS code 541512 for computer systems design services. The effort is focused on achieving and maintaining cyber compliance for defense-related data, with no set-aside criteria specified. The contract is open for responses until August 3, 2026, and is publicly accessible through the DIBBS platform. The contractor is expected to deliver a robust, auditable framework for safeguarding sensitive information, with ongoing accountability for incident reporting and continuous adherence to federal cybersecurity standards.