Cybersecurity Compliance and CDI Safeguarding (NIST SP 800-171)

This contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard Covered Defense Information across the supply chain, in strict accordance with NIST Special Publication 800-171 standards. The work is scoped as a subcontract under the Department of Defense, with performance centered in Tracy, California, where all cybersecurity measures must be executed to ensure the confidentiality, integrity, and availability of sensitive defense-related data. Compliance with NIST SP 800-171’s 110 controls is mandatory, covering areas such as access control, audit and accountability, risk assessment, and incident response, with continuous monitoring and documentation required to maintain certification. The solicitation, issued under NAICS code 541512 for Computer Systems Design Services, is open to qualified subcontractors who can demonstrate proven experience in securing CDI within defense supply networks. Responses must be submitted by July 22, 2026, and the contract will be awarded to entities capable of integrating robust cybersecurity frameworks into their operational environments while meeting all federal requirements for handling controlled unclassified information. No set-aside preferences are specified, meaning the opportunity is open to all eligible contractors regardless of size or ownership structure, provided they can fully comply with the stringent security protocols outlined.