Cybersecurity Compliance & Incident Reporting

The contract requires full implementation of NIST SP 800-171 security controls to safeguard covered defense information against unauthorized access, disclosure, or compromise. Compliance with these controls is mandatory and must be maintained throughout the duration of the subcontract, ensuring all systems and processes handling sensitive government data meet the minimum cybersecurity standards established by federal guidelines. In addition to operational safeguards, the contractor must establish and maintain procedures for timely detection, reporting, and escalation of any cyber incidents affecting covered defense information, in accordance with DFARS 252.204-7012, including providing detailed incident reports to the Department of Defense as required. The subcontract is issued by the Defense Logistics Agency under the Fluid Handling Division, with performance obligations centered in Barstow, California, zip code 92311-5014. The North American Industry Classification System code is 541512, indicating service provision in computer systems design and related activities. The solicitation was posted on May 31, 2026, with responses due by June 11, 2026, and is structured as a subcontract under a broader Department of Defense acquisition. Failure to implement the required cybersecurity controls or report incidents in a timely and accurate manner may result in contract termination, financial penalties, or loss of eligibility for future defense work.