Cybersecurity & CUI Safeguarding (DFARS 252.204-7012 Compliance)

The contract requires full implementation of NIST SP 800-171 controls to safeguard Covered Defense Information in compliance with DFARS 252.204-7012, demanding a robust cybersecurity framework to protect controlled unclassified information. This includes conducting a thorough system assessment to verify adherence to the specified controls, providing mandatory cybersecurity training to all personnel with access to covered systems, and establishing procedures for timely cyber incident reporting as required by federal regulations. All activities must be performed at the designated place of performance in Tracy, California, with a zip code of 95304-5000. This subcontract is classified under NAICS code 541512, indicating a focus on computer systems design and related services, and is issued by the Department of Defense through DLA Dist San Joaquin. Responses must be submitted by August 17, 2026, with the solicitation posted on August 5, 2026. Compliance is non-negotiable and tied directly to the protection of sensitive defense data, with failure to meet the requirements potentially resulting in contract termination or penalties. The contractor is expected to demonstrate operational readiness to handle, store, and transmit Covered Defense Information securely and to respond effectively to any cybersecurity incidents affecting the system.