Cybersecurity Compliance and Reporting (NIST SP 800-171)

This contract requires the implementation and maintenance of cybersecurity controls to safeguard covered defense information in accordance with DFARS clause 252.204-7012, aligning with the standards outlined in NIST SP 800-171. The work includes establishing, monitoring, and updating security measures to ensure compliance with federal requirements for protecting sensitive data, along with timely reporting of any cyber incidents and proper preservation of digital media as part of forensic and investigative procedures. All activities must be performed to meet the stringent security expectations mandated for defense contractors handling controlled unclassified information. The contract is issued as a subcontract under the Department of Defense, specifically by the Active Devices Division, with performance location in Tracy, California, zip code 95304-5000. It falls under NAICS code 541512 for computer systems design services and is open for responses until July 20, 2026, with the solicitation posted on July 9, 2026. There is no specified set-aside or organization type restriction, and the procurement is managed through the DIBBS platform, requiring interested parties to engage via the provided electronic link to submit proposals and comply with all contractual obligations related to cybersecurity resilience and incident response.