Cybersecurity Compliance and Covered Defense Information Safeguarding

The contract requires full implementation of NIST SP 800-171 controls and adherence to DFARS 252.204-7012 to protect covered defense information and ensure timely reporting of any cyber incidents. Compliance with these standards is mandatory to safeguard sensitive information handled under the contract, with strict obligations around access controls, data encryption, audit logging, and incident response procedures. The subcontract is designated as a Total Small Business Set-Aside under SBA guidelines, restricting eligibility to small businesses as defined by the SBA, and is classified under NAICS code 541512 for custom computer programming services. Performance of the work is centered at Tracy, California, with the requirement that all cybersecurity measures be fully operational and auditable to meet Department of Defense expectations. The solicitation was published on July 28, 2026, with responses due by August 10, 2026, under the Electrical Devices Division of the Department of Defense. The contract is part of a broader effort to enforce standardized cybersecurity posture across defense supply chain partners, ensuring that third-party vendors meet the same rigorous protections as prime contractors. There are no specified point of contact details provided, and the place of performance does not include state-level designation, though the zip code confirms the primary location. All bidders must demonstrate proven capability in executing NIST 800-171 controls and maintaining DFARS compliance, with documentation and audit trails ready for review.