Cybersecurity Compliance and Reporting

The contract requires the implementation of NIST SP 800-171 security controls and the establishment of robust cyber incident reporting procedures for systems handling covered defense information as mandated by DFARS requirements. This subcontract is focused on ensuring full compliance with federal cybersecurity standards to protect sensitive data within the Department of Defense ecosystem, specifically targeting environments in San Diego with a ZIP code of 92136. The work involves configuring, validating, and maintaining technical and procedural safeguards aligned with NIST guidelines to mitigate risks associated with unauthorized access, disclosure, or compromise of controlled unclassified information. All activities must be completed and submitted by the response deadline of July 21, 2026, following the issuance date of July 13, 2026. The contract falls under NAICS code 541512 for computer systems design services and is administered by the ASC SUPPLIER OPER AE AND AF DIV under the Department of Defense. While no set-aside preferences are indicated, the contractor must be prepared to demonstrably meet all technical and reporting obligations, including immediate notification and documentation of any cyber incidents affecting covered systems, and must operate within the defined place of performance in San Diego.