Cybersecurity Compliance and Reporting (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard covered defense information in alignment with DFARS 252.204-7012 and 252.204-7020, ensuring compliance with the National Institute of Standards and Technology Special Publication 800-171 standards. This includes conducting regular self-assessments of security posture, documenting control effectiveness, and promptly reporting any cyber incidents that may compromise the integrity, confidentiality, or availability of sensitive data handled under the agreement. The work is to be performed at the specified location in Tracy, California, with all activities centered on meeting federal defense cybersecurity requirements. This is a subcontract under the Department of Defense, managed by the ASC Commodities Division, and is classified under NAICS code 541512 for computer systems design services. The solicitation was posted on July 15, 2026, with responses due by July 20, 2026, indicating a tight turnaround for qualified vendors to demonstrate capability and readiness. There is no set-aside designation, meaning the opportunity is open to all eligible contractors, and compliance with the specified cybersecurity protocols is mandatory for award consideration and contract performance.