Cybersecurity Compliance & Incident Response

The contract requires implementation of NIST SP 800-171 cybersecurity controls to safeguard covered defense information on systems managed by the awardee, ensuring alignment with federal standards for protecting sensitive military data. It further mandates immediate cyber incident reporting in accordance with applicable regulations and the preservation of forensic data to support investigation and remediation efforts following any breach or suspected compromise. The work is scoped to support systems handling classified or controlled unclassified information related to defense operations and must be performed at the designated location in Tracy, California, with a zip code of 95304-5000. This subcontract is set aside exclusively for small businesses under the SBA’s Total Small Business Set-Aside program, classified under NAICS code 541512 for Computer Systems Design Services, and is issued by the Department of Defense’s Active Devices Division. Responses must be submitted by August 14, 2026, following the posted solicitation date of July 30, 2026.