Cybersecurity Compliance and Reporting Support

The contract requires comprehensive support for implementing and maintaining compliance with DFARS 252.204-7012, ensuring all NIST SP 800-171 security controls are fully enacted to protect controlled unclassified information. This includes establishing procedures for the prompt reporting of any cyber incidents within 72 hours, preserving system and network logs for a minimum of 30 days, and ensuring that all subcontractors handling covered information are bound by the same cybersecurity requirements through appropriate flow-down clauses. Compliance must be operational and verifiable, with documentation demonstrating control implementation, incident response readiness, and subcontractor accountability. The work is to be performed at Tracy, California, with a response deadline of May 14, 2026, and is categorized under NAICS code 541512 for computer systems design services. This subcontract is part of a Department of Defense initiative managed by LAND SUPPLIER OPNS ENGINES, and the successful contractor will be expected to provide ongoing support to sustain compliance through audits, updates to controls as standards evolve, and training personnel on security protocols and reporting obligations. No set-aside designation is specified, and the contracting process is conducted through the DIBBS platform.