Cybersecurity Compliance for Contractor Systems (DFARS 252.204-7012)

This contract requires the implementation of NIST SP 800-171 safeguards to protect controlled unclassified information on contractor systems, in full compliance with DFARS 252.204-7012. The contractor must establish and maintain the specified cybersecurity controls to ensure the confidentiality, integrity, and availability of CUI handled within their systems. Compliance is mandatory and must be self-attested through the System for Award Management, with documentation and verification procedures aligned with federal requirements. The obligation applies to all systems supporting work under this subcontract, and failure to meet the standard could result in loss of eligibility or contract termination. The contract is issued under NAICS code 541512, indicating it relates to computer systems design services, and is managed by the Department of Defense through the Land Supply Chain organization. Performance is required in San Diego, California, with a zip code of 92135-7058. Responses must be submitted by August 3, 2026, and the solicitation was posted on July 21, 2026. The subcontract nature means this requirement flows from a prime contractor, and the winning party must ensure their cybersecurity posture meets federal standards without reliance on upstream assurances. All activities must be conducted in alignment with the DFARS clause, with no exemptions allowed, and ongoing compliance is expected throughout the life of the subcontract.