Cybersecurity Compliance and Reporting (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to safeguard covered defense information against unauthorized access, disclosure, or compromise. Compliance with these controls is mandatory to meet the requirements of DFARS 252.204-7012, which includes the timely detection, reporting, and response to cyber incidents affecting classified or sensitive information. The obligation extends to ensuring all systems and processes handling such information are continuously monitored, assessed, and adjusted to remain in full compliance with the specified standards. The contract is structured as a subcontract under the Department of Defense, specifically managed by DLA Dist San Joaquin, with performance expected to occur at Tracy, California, zip code 95304-5000. It is classified under NAICS code 541512, indicating it pertains to computer systems design services. Responses must be submitted by July 20, 2026, with the solicitation posted on July 9, 2026. While no set-aside designation is specified, participation is contingent upon the ability to fully satisfy the cybersecurity compliance and incident reporting obligations as defined by federal regulations governing defense contractors.