Cybersecurity Compliance and Incident Reporting

The contract requires ongoing protection of Controlled Unclassified Information (CUI) through full implementation of the National Institute of Standards and Technology Special Publication 800-171 security controls, ensuring that all systems handling CUI meet federal cybersecurity standards. Compliance includes maintaining documented security policies, conducting regular assessments, and applying necessary safeguards to prevent unauthorized access or disclosure. The contractor must also establish and sustain capabilities for immediate cyber incident reporting via the Defense Industrial Base Cybersecurity and Information Analysis Center (DIBNet) in accordance with DFARS requirements, ensuring timely notification and coordinated response to any security breaches or anomalies affecting CUI. This is a total small business set-aside subcontract under NAICS code 541512, targeting small businesses as defined by the Small Business Administration. The place of performance is designated as Tracy, California, with a response deadline of August 18, 2026, and the contract was posted on August 3, 2026. The contracting activity falls under the Department of Defense, specifically managed by the Land Supplier Operations Vehicle Support office, requiring the successful offeror to operate within a strict compliance framework aligned with national defense cybersecurity mandates. All activities must be executed in strict adherence to federal regulatory guidelines without exception.