Cybersecurity Compliance & DFARS Reporting

The contract requires implementation of NIST SP 800-171 security controls to protect covered defense information and ensure full compliance with DFARS 252.204-7012, including timely reporting of any cyber incidents affecting covered systems. The work involves establishing and maintaining technical, administrative, and physical safeguards mandated by federal regulations to secure controlled unclassified information within contractor environments. Compliance must be demonstrated through documented policies, ongoing monitoring, and incident response procedures aligned with federal cybersecurity standards. This subcontract is issued under NAICS code 541512 by the Department of Defense’s Active Devices Division, with performance required at a location in Tracy, California, ZIP 95304-5000. The solicitation was posted on July 30, 2026, and responses are due by August 14, 2026. All contractors must be prepared to validate their cybersecurity posture and submit required reports under the DFARS clause, with non-compliance potentially resulting in contract termination or penalties. The scope is strictly focused on cybersecurity compliance and reporting, with no additional services or deliverables beyond safeguarding covered defense information as defined in federal guidance.