Cybersecurity Compliance and Reporting (NIST SP 800-171 / DFARS 252.204-7012)

The contract requires implementation and maintenance of cybersecurity safeguards in accordance with NIST Special Publication 800-171 for all systems handling covered defense information, ensuring compliance with federal standards for protecting sensitive data. This includes establishing and sustaining access controls, audit capabilities, configuration management, incident response procedures, and other security controls outlined in the NIST framework to safeguard information systems against unauthorized access, disclosure, or compromise. The contractor must also adhere to mandatory cyber incident reporting requirements as mandated by DFARS 252.204-7012, ensuring timely notifications and coordination with the Department of Defense in the event of a security breach or anomaly. This subcontract is issued under the NAICS code 541512 for Computer Systems Design Services and is tied to the ACTIVE DEVICES DIVISION within the Department of Defense. The place of performance is designated as Tracy, California, with a zip code of 95304-5000. The solicitation, posted on July 9, 2026, has a response deadline of July 20, 2026, and is accessible via the DIBBS platform. While no set-aside type is specified, the contract demands full compliance with DoD cybersecurity regulations and expects the contractor to have robust technical and procedural capabilities to meet continuous security monitoring and reporting obligations without interruption.