Cybersecurity and CUI Safeguarding Compliance

The contract requires implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls to protect covered defense information and ensure compliance with mandatory cyber incident reporting requirements. This subcontract is issued under the Department of Defense’s Electrical Devices Division, with performance located in Tracy, California, and is classified under NAICS code 541512, indicating it relates to custom computer programming services. The responsible party must establish a robust security framework aligned with federal standards for safeguarding controlled unclassified information, including technical, administrative, and physical safeguards. Continuous monitoring, documentation, and reporting of security posture are critical to maintaining compliance and responding promptly to any cybersecurity incidents affecting covered information. The solicitation is open for response through July 20, 2026, and the contract is structured as a subcontract, meaning the successful offeror will operate under a prime contractor’s umbrella. There is no specified set-aside classification, and the opportunity is available to eligible industry participants who can demonstrate the capability to meet NIST 800-171 requirements at the specified location. While no point of contact is listed, interested parties must submit their proposals via the designated DIBBS platform before the deadline to be considered for award. Non-compliance with the control framework or failure to report cyber incidents in accordance with federal guidelines may result in contract termination or penalties.