Cybersecurity Compliance and CDI Safeguarding

This contract requires the implementation of NIST SP 800-171 controls to safeguard Covered Defense Information, ensuring that all systems handling such data meet the mandatory cybersecurity standards set forth by the Department of Defense. The scope includes developing a comprehensive System Security Plan that documents the protective measures in place, as well as establishing procedures for timely cyber incident reporting in accordance with DFARS 252.204-7012. Compliance is non-negotiable and must be fully operational by the contract’s performance timeline, with all controls rigorously documented and auditable. The work is to be performed at the specified location in San Diego, California, and is structured as a subcontract under a Department of Defense acquisition. The solicitation is open for responses until July 20, 2026, and is categorized under NAICS code 541512 for computer systems design services. While no set-aside provisions are indicated, the contract is issued through the Defense Logistics Agency’s DIBBS platform and is tied to a specific defense contract vehicle under the agency name SAN DIEGO. All responsible offerors must demonstrate proven capability in NIST 800-171 implementation, incident response protocols, and secure handling of CDI. Failure to meet these requirements will result in non-compliance and potential contract termination, making adherence to the specified standards the central obligation of all performance activities.