Cybersecurity and CUI Safeguarding

The contract requires implementation of NIST SP 800-171 cybersecurity controls across all systems handling Controlled Unclassified Information to ensure compliance with Department of Defense requirements under DFARS clauses. This includes the development of a System Security Plan that documents the application of required security controls, ongoing monitoring of system configurations, and preparation for official audits to verify adherence to federal cybersecurity standards. The contractor must establish, maintain, and continuously improve protections for CUI throughout its lifecycle, ensuring that all technical, administrative, and physical safeguards are fully integrated and operational. Performance is expected at Tracy, California with the work classified as a subcontract under NAICS code 541512 for Computer Systems Design Services. The solicitation was posted on July 19, 2026, with responses due by July 30, 2026, and the award will be managed by the Defense Logistics Agency San Joaquin under the Department of Defense. Full audit readiness is critical, requiring documented evidence of control implementation, personnel training, incident response procedures, and regular assessments to satisfy compliance obligations without exception.