Cybersecurity Compliance for Controlled Technical Data

This contract requires the implementation of NIST SP 800-171 security controls to safeguard controlled unclassified information, including technical drawings and technical data packages, in accordance with DFARS 252.240-7997. The effort is focused on achieving full compliance with federal cybersecurity standards to protect sensitive defense-related information from unauthorized access, disclosure, or compromise. The subcontractor must establish and maintain a robust security framework that aligns with NIST requirements, covering areas such as access control, audit logging, configuration management, incident response, and system integrity. The work is tied to the Department of Defense’s ASC Commodities Division and is performance-based at Tracy, California, with a zip code of 95304-5000. The solicitation was posted on July 13, 2026, and responses are due by July 21, 2026. It falls under NAICS code 541512 for computer systems design services, indicating the need for specialized cybersecurity expertise. As a subcontract, the work supports a broader prime contractor or government initiative, and all security measures must be documented, tested, and verifiable to meet DFARS compliance obligations without exception.