Cybersecurity Compliance and CDI Handling

The contract requires implementation of all NIST SP 800-171 security controls to safeguard Covered Defense Information (CDI) in compliance with DFARS 252.204-7012, ensuring that systems and processes handling sensitive defense data meet federal cybersecurity standards. A full self-assessment for CMMC Level 2 must be conducted to verify adherence to these controls, documenting readiness and identifying any gaps that need remediation before operational deployment. The scope encompasses technical, administrative, and physical safeguards necessary to protect CDI across the contractor’s environment, with an emphasis on continuous compliance and incident response readiness. This subcontract is issued under the Department of Defense’s Electrical Devices Division, with performance expected at Tracy, California, in a facility subject to full compliance with the specified cybersecurity requirements. The solicitation, posted on July 13, 2026, requires a response by July 24, 2026, and is classified under NAICS code 541512 for computer systems design services. Contractors must demonstrate proven experience in implementing NIST frameworks and managing CDI in alignment with DoD standards, with all technical documentation and self-assessment results submitted as part of the proposal to confirm eligibility and capability.