Cybersecurity and CUI Safeguarding Services

The contract requires the implementation of NIST SP 800-171 Rev 2 controls to safeguard Controlled Unclassified Information and Contract Data Information across all relevant systems, ensuring full compliance with DFARS 252.204-7012. This includes conducting comprehensive system assessments to identify gaps in security posture, establishing robust incident reporting procedures to meet federal timelines and standards, and validating that all technical, administrative, and physical safeguards are properly integrated and operational. The work is focused on achieving and maintaining a compliant environment for handling sensitive government data within a defense contractor context. The subcontract is solicited under the NAICS code 541512 for Computer Systems Design and Related Services, with performance required at the location in Tracy, California, ZIP 95304-5000. The solicitation is issued by the Active Devices Division within the Department of Defense, and responses must be submitted by August 7, 2026. While no set-aside designation is specified, the nature of the work demands expertise in cybersecurity frameworks and defense contracting regulations, and successful performers must demonstrate proven capability in executing NIST controls, managing CUI/CDI lifecycle protections, and reporting incidents as mandated by federal acquisition requirements.