Cybersecurity Compliance and CUI Safeguarding

This contract requires the implementation and thorough documentation of NIST Special Publication 800-171 controls to safeguard covered defense information, with a specific focus on safeguarding controlled unclassified information. The successful bidder must develop a System Security Plan that details how each required security control is addressed and maintained within the organization’s environment. In addition to plan development, the contractor is responsible for establishing and maintaining procedures to promptly report any cyber incidents that may compromise the confidentiality, integrity, or availability of the protected information, in alignment with federal requirements. The work is to be performed at a designated location in Tracy, California, with a zip code of 95304-5000, and is classified as a subcontract under the NAICS code 541512, indicating a focus on computer systems design services. The solicitation was posted on July 21, 2026, with responses due by July 29, 2026, and is sourced from the ASC Commodities Division within the Department of Defense. All activities must comply with federal cybersecurity standards for defense contractors, and the contractor is expected to demonstrate full adherence to NIST 800-171 requirements to ensure the protection of sensitive government data.