Cybersecurity Compliance and CDI Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect Covered Defense Information across all systems handling order processing, design, or logistics functions. Compliance with these controls is mandatory to ensure the confidentiality, integrity, and availability of sensitive defense data throughout the contract lifecycle. The work must be performed at the designated place of performance in Tracy, California, with the full scope focused on securing systems that process or store information related to Department of Defense supply chain operations. This subcontract is issued under NAICS code 541512 for computer systems design services and is part of a broader effort by the Land Supply Chain organization to enforce cybersecurity standards across its vendor ecosystem. Interested parties must submit responses by the deadline of August 3, 2026, and are expected to demonstrate proven capability in deploying and sustaining NIST 800-171 requirements in operational environments. Continuous monitoring and documentation of control effectiveness will be necessary to maintain compliance throughout the performance period.