Cybersecurity & CUI Safeguarding

The contract requires full implementation and ongoing maintenance of the cybersecurity controls outlined in NIST SP 800-171 to protect covered defense information, ensuring compliance with Department of Defense requirements. All systems and processes handling controlled unclassified information must be aligned with these standards, with continuous monitoring and documentation to validate adherence. Any cyber incidents involving potential breaches or unauthorized access to covered defense information must be reported promptly in accordance with DFARS 252.204-7012, including timely notifications and submission of required forensic data. This is a subcontract under the Department of Defense, tied to the NAICS code 541512 for custom computer programming services, with performance located in Tracy, California, 95304-5000. The solicitation was posted on July 17, 2026, and responses are due by July 22, 2026. While no set-aside classification is specified, the contractor must ensure all NIST controls are fully operational and validated prior to system deployment and maintained throughout the contract period. Compliance is non-negotiable and will be subject to verification and audit by the contracting authority.