Top

Cybersecurity Compliance for Controlled Unclassified Information

Active

Federal

Response Deadline08/20/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

General Info

Agency

Department Of Defense → ACTIVE DEVICES DIVISIONView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

TRACY, CA, 95304-5000, US

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedAug 9

subcontract

Response DeadlineAug 20

Submission deadline

Response Deadline

08/20/2026, 05:00:00 PM UTCin 11 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

AgencyDepartment Of Defense → ACTIVE DEVICES DIVISION

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of Defense → ACTIVE DEVICES DIVISION

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Implement and maintain NIST SP 800-171 safeguards for systems handling CUI, in compliance with DFARS 252.204-7012.

Similar Contracts

Same NAICS industry code

NAICS: 541512

New

DIBBS

Cybersecurity and CMMC Compliance Support

ASC SUPPLIER OPER AE AND AF DIV

POSTED

DEADLINE

Cybersecurity Compliance (CMMC Level 2 & NIST SP 800-171)The contract requires the implementation and maintenance of robust cybersecurity controls to protect covered defense information in full alignment with CMMC Level 2, NIST SP 800-171, and DFARS regulatory standards. This effort is critical to ensuring the confidentiality, integrity, and availability of sensitive data handled under the subcontract, with compliance being non-negotiable and subject to verification. All security practices must be systematically documented, monitored, and continuously improved to meet the rigorous requirements set forth by the Department of Defense. This subcontract is positioned under NAICS code 541512, indicating it relates to computer systems design services, and is tied to a performance location in Tracy, California, with a zip code of 95304-5000. The procurement was posted on August 9, 2026, with responses due by August 20, 2026. It falls under the purview of the Department of Defense, specifically managed by the Construction & Equipment MRO SVC I organization, and is issued through the DIBBS system. While no set-aside designation is specified, the contractor must be prepared to demonstrate full adherence to all federal cybersecurity mandates without deviation.

CONSTRUCTION & EQUIPMENT MRO SVC I

POSTED

DEADLINE

Cybersecurity Compliance (NIST SP 800-171)The contract requires the implementation and documentation of NIST SP 800-171 cybersecurity controls to safeguard Covered Defense Information within contractor systems that handle classified or sensitive contract data. This effort is mandatory for ensuring compliance with federal cybersecurity standards applicable to defense contractors and involves a full assessment and record-keeping of all required security controls across systems processing protected information. The work must be completed in alignment with the NIST framework and demonstrated through formal documentation to meet contractual obligations. The contract is classified as a subcontract under the NAICS code 541512, associated with computer systems design services, and is issued by the ASC Commodities Division of the Department of Defense with performance required in Tracy, California, 95304-5000. The solicitation was posted on August 9, 2026, with a response deadline of August 17, 2026, indicating a tight turnaround for submission. Although no set-aside type is specified, the contract is governed by DoD cybersecurity regulations and demands strict adherence to NIST guidelines to protect national defense information, making compliance non-negotiable for award consideration.

ASC COMMODITIES DIVISION

POSTED

DEADLINE

Cybersecurity Compliance & NIST 800-171 AssessmentThe contract requires the performance of NIST SP 800-171 cybersecurity assessments to ensure systems handling Covered Defense Information meet federal security requirements. The effort focuses on evaluating compliance with the specified framework, identifying gaps, and implementing necessary safeguards to protect sensitive data. All assessment outcomes must be documented and submitted through the Supplier Performance Risk System to validate adherence to contractual and regulatory obligations. The work is tied to a subcontract under the Department of Defense and is to be performed at Robins Air Force Base, Georgia, with a zip code of 31098-1887. The solicitation was posted on August 9, 2026, and responses are due by August 17, 2026, under the NAICS code 541512, indicating it pertains to computer systems design services. There is no set-aside designation specified, and the contract does not include a designated point of contact within the provided details.

ASC SUPPLIER OPER AE AND AF DIV

POSTED

DEADLINE

Cybersecurity Compliance and Reporting (Subcontractor Support)This contract requires subcontractor support to ensure compliance with NIST SP 800-171 standards for protecting covered defense information, while also mandating timely reporting of any cyber incidents in accordance with DFARS 252.204-7012. The work involves implementing and maintaining security controls aligned with federal cybersecurity requirements to safeguard sensitive data handled by the subcontractor on behalf of the Department of Defense. Performance is expected to be conducted at the designated location in New Cumberland, Pennsylvania, with a strict deadline for response submission set for August 17, 2026. The solicitation falls under NAICS code 541512, indicating it is focused on computer systems design services, and is issued under the ASC SUPPLIER OPER OEM DIVISION, with no set-aside classification specified. The subcontractor must be prepared to demonstrate robust cybersecurity practices and incident response capabilities to meet defense contractual obligations.

ASC SUPPLIER OPER OEM DIVISION

POSTED

DEADLINE

Cybersecurity and CMMC Assessment SupportThe contract seeks to provide specialized support to a prime contractor in achieving Cybersecurity Maturity Model Certification (CMMC) Level 2 compliance, specifically focused on the safeguarding of Controlled Unclassified Information (CUI). The effort involves assisting the prime contractor with implementing required security controls, conducting gap assessments, preparing documentation, and ensuring adherence to CMMC framework standards to meet Department of Defense cybersecurity requirements. The work is aligned with NAICS code 541512, indicating it falls under computer systems design and related services, and is structured as a subcontract to support broader defense contracting obligations. This subcontract is tied to performance at Hill Air Force Base with ZIP code 84056-5734 and was posted on August 9, 2026, with a response deadline of August 17, 2026. The acquiring agency is the Department of Defense, specifically under the ASC SUPPLIER OPER AE AND AF DIV, indicating this effort is part of a broader defense supply chain modernization and cybersecurity enhancement initiative. The subcontractor must possess demonstrated expertise in CMMC Level 2 implementation, knowledge of NIST SP 800-171 controls, and experience working within defense contracting environments to ensure the prime contractor meets all assessment and certification prerequisites within the established timeline.

ASC SUPPLIER OPER AE AND AF DIV

POSTED

DEADLINE

Covered Defense Information (CDI) SafeguardingThe contract requires implementation and maintenance of NIST SP 800-171 cybersecurity controls across systems handling Covered Defense Information, ensuring compliance with Department of Defense standards for protecting sensitive unclassified data. This includes developing and maintaining a System Security Plan that documents all implemented controls, procedures, and organizational responsibilities, as well as preparing for and sustaining readiness for official DOD assessments to validate compliance. The work must be performed at the designated location in New Cumberland, Pennsylvania, with a strict deadline for response by August 20, 2026, and the solicitation was posted on August 9, 2026. The NAICS code 541512 indicates the work relates to computer systems design services, aligning with the technical scope of cybersecurity implementation. This is a subcontract opportunity under the Department of Defense’s Construction & Equipment MRO SVC I contract vehicle, emphasizing the need for qualified vendors to support defense infrastructure with secure information handling practices.

CONSTRUCTION & EQUIPMENT MRO SVC I

POSTED

DEADLINE

Cybersecurity Compliance for Covered Defense Information (CDI)This contract requires the implementation of NIST Special Publication 800-171 controls and full compliance with DFARS clause 252.204-7012 to protect covered defense information handled during performance. The subcontractor must establish and maintain a secure environment that meets federal requirements for safeguarding sensitive defense data, including implementing appropriate access controls, audit logging, incident reporting, and system integrity measures. Compliance is mandatory for all systems and processes handling covered defense information, with failure to meet requirements potentially resulting in contract termination or penalties. The contract falls under NAICS code 541512 for computer systems design services and is associated with the Department of Defense’s Land Supply Chain organization. Performance is to take place at Fort Bliss, TX 79918-0000, and the agreement is structured as a subcontract. The solicitation was posted on August 9, 2026, with responses due by August 20, 2026. The contractor is expected to demonstrate operational readiness and ongoing adherence to cybersecurity standards throughout the contract period, ensuring that all technical, administrative, and physical safeguards prescribed by NIST and DFARS are fully integrated and auditable.

POSTED

DEADLINE

Cybersecurity Compliance for Covered Defense Information (CUI)The contract requires the implementation of NIST SP 800-171 security controls to protect Covered Unclassified Information (CUI) and ensure compliance with DFARS 252.204-7012, which governs the safeguarding of controlled unclassified information in nonfederal systems. This subcontract is centered on establishing and maintaining a robust cybersecurity posture that meets federal standards for handling sensitive defense-related data, including proper access controls, audit logging, malware protection, configuration management, and incident response procedures. The contractor must be prepared to report any cyber incidents involving CUI in accordance with the mandated reporting timeline and procedures outlined in the DFARS clause. The contract is associated with the Department of Defense and will be performed at a location in Jacksonville, Florida, with a North American Industry Classification System code of 541512 indicating information technology services. The solicitation was posted on August 9, 2026, and responses are due by August 20, 2026. This subcontract does not specify any set-aside status and is part of a broader effort to enforce cyber resilience across the defense industrial base. Compliance is not optional; failure to implement the required controls or report incidents properly may result in contract termination or penalties.

POSTED

DEADLINE

Cybersecurity for Covered Defense Information (CDI)

MEDICAL SUPPLY CHAIN MD SURG FSF

POSTED

DEADLINE

CMMC Level 2 Cybersecurity ComplianceThe contract requires the implementation and ongoing maintenance of Cybersecurity Maturity Model Certification (CMMC) Level 2 controls across systems handling Covered Defense Information (CDI). This includes executing a full compliance assessment and achieving certification through a Certified Third-Party Assessment Organization (C3PAO) to ensure alignment with Department of Defense cybersecurity standards. The work must be performed at the designated place of performance in New Cumberland, Pennsylvania, with a response deadline for proposals set for August 20, 2026. The contract is classified as a subcontract under NAICS code 541512, indicating it falls within the category of Custom Computer Programming Services, and is issued by the Active Devices Division of the Department of Defense. Compliance with CMMC Level 2 requirements is mandatory, encompassing both technical and organizational safeguards to protect sensitive defense data throughout the system lifecycle.

ACTIVE DEVICES DIVISION

POSTED

DEADLINE

Cybersecurity and CUI SafeguardingThe contract entails the implementation and ongoing maintenance of comprehensive cybersecurity controls to ensure compliance with CMMC Level 2 and NIST SP 800-171 standards for systems handling controlled unclassified information. The work is focused on safeguarding CUI within the operational environment at Robins Air Force Base, Georgia, under the Department of Defense’s Warner Robins organization. The contractor must establish, validate, and sustain a robust security posture that aligns with federal requirements, addressing technical, administrative, and physical controls necessary to protect sensitive data from unauthorized access, disclosure, or compromise. This is a subcontract opportunity with a NAICS code of 541512, indicating it pertains to computer systems design services. The solicitation was posted on August 9, 2026, with responses due by August 20, 2026, providing a tight window for qualified entities to submit proposals. Performance must be executed at the specified location in Robins AFB, and the contractor is expected to demonstrate proven experience in delivering CMMC and NIST compliance solutions, including documentation, auditing, and continuous monitoring capabilities. The absence of a set-aside designation means the opportunity is open to all eligible small and large businesses, with evaluation likely centered on technical capability, past performance, and compliance readiness.

POSTED

DEADLINE

More opportunities from Department Of Defense → ACTIVE DEVICES DIVISION

Same awarding agency

NAICS: 484220

New

DIBBS

Specialized Freight & Destination Delivery for Regulated GoodsThe contract requires the specialized transport and delivery of packaged hazardous components to a designated location in Norfolk, Virginia, ensuring full compliance with all federal regulations governing hazardous materials handling, documentation, routing protocols, and chain-of-custody tracking. All parties involved must adhere to strict safety and security standards throughout the logistics process, with accurate recordkeeping and real-time tracking mandatory to maintain regulatory compliance and accountability. The scope encompasses end-to-end management of regulated goods, from pickup to final destination, with zero tolerance for deviation from approved procedures. This subcontract, issued under NAICS code 484220 by the Department of Defense’s Active Devices Division, has a response deadline of August 20, 2026, and was posted on August 9, 2026. Performance is localized to the Norfolk area, and bidders must demonstrate proven experience in handling regulated materials within defense supply chains. The solicitation does not specify set-aside provisions, indicating open competition, and all proposals must align with DoD standards for security, traceability, and operational integrity. Proposals should be submitted via the provided DIBBS link, as no point of contact is listed for inquiries.

Specialized Freight (except Used Goods) Trucking, Local

POSTED

DEADLINE

Military Packaging and Marking ServicesThe contract requires the provision of comprehensive packaging, preservation, and labeling services strictly aligned with MIL-STD-2073-1E and MIL-STD-129 standards, ensuring military-grade integrity for all materials. This includes precise bar-coding, systematic palletization, and full adherence to DLA RP001 requirements to guarantee traceability, durability, and compatibility with Department of Defense logistics systems. All work must be executed to meet stringent federal specifications for storage, transport, and handling of sensitive military assets. The solicitation is classified as a subcontract under NAICS code 493190, issued by the ACTIVE DEVICES DIVISION within the Department of Defense, with performance centered in Norfolk, Virginia, at ZIP code 23511. The response deadline is set for August 20, 2026, and potential bidders must ensure full compliance with all technical, procedural, and labeling mandates before submission. The contract emphasizes accuracy in documentation and operational readiness to support sustained military supply chain operations.

Other Warehousing and Storage

POSTED

DEADLINE

Hazardous Materials Compliance & Labeling ServicesThe contract requires comprehensive compliance with OSHA and DFARS regulations for the handling, packaging, labeling, and documentation of hazardous materials. This includes the accurate preparation of Safety Data Sheets and the proper application of hazard warning labels to ensure all materials meet federal safety and defense standards. The work is critical to supporting military operations and must adhere to strict regulatory frameworks governing the transport and storage of dangerous goods. The solicitation is structured as a subcontract under NAICS code 541690, with a response deadline of August 20, 2026, and performance centered in Norfolk, Virginia, at the ZIP code 23511. The contracting entity is the ACTIVE DEVICES DIVISION within the Department of Defense, emphasizing the defense-related nature of the requirements. All deliverables must be executed to maintain regulatory compliance and support the integrity of defense supply chains, with no set-aside designation specified for small or specialized businesses.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

Manufacture of Heat Sink-Insulator ComponentThe contract calls for the fabrication and delivery of a specialized heat sink-insulator component that must meet rigorous military specifications, encompassing full compliance with performance, thermal, and environmental standards. The work includes design validation to ensure functional integrity, sourcing of approved materials meeting military-grade requirements, and end-to-end production under strict quality control protocols. All manufacturing processes must be documented and traceable to guarantee adherence to defense industry benchmarks, with final delivery expected at the specified performance location in Norfolk, Virginia, under the procurement oversight of the Department of Defense’s Active Devices Division. The opportunity is structured as a subcontract, with a response deadline of August 20, 2026, and was posted on August 9, 2026, indicating a limited window for qualified vendors to submit proposals. The NAICS code 332323 identifies the sector as Other Heating Equipment Manufacturing, underlining the technical nature of the component and its intended application in defense systems. While no set-aside classification is provided, the requirement demands proven experience in high-reliability component manufacturing for military applications. The sole point of reference for submissions is the DIBBS portal, and successful contenders must demonstrate capability not only in production but also in supply chain traceability and documentation to satisfy federal and defense compliance mandates.

Ornamental and Architectural Metal Work Manufacturing

POSTED

DEADLINE

Hazardous Materials Labeling & ComplianceThis contract requires the application and verification of hazard warning labels on packaging for any components or systems that contain hazardous substances, ensuring full compliance with the DFARS clause 252.223-7001. The work involves precise labeling procedures to communicate risks accurately and meet federal defense standards, with all activities centered around the designated place of performance in New Cumberland, Pennsylvania, under the oversight of the Department of Defense’s Active Devices Division. The solicitation is structured as a subcontract and is exclusively reserved for small businesses through a total small business set-aside, as defined by the SBA and FAR 19.5, with the NAICS code 541620 indicating that the work falls under professional, scientific, and technical services related to environmental compliance and safety. Responses must be submitted by August 20, 2026, following the posting date of August 9, 2026, with all efforts focused on meeting rigorous regulatory requirements for hazard communication in defense-related packaging.

Environmental Consulting Services

POSTED

DEADLINE

Cybersecurity Compliance & NIST 800-171 Assessment SupportA small business subcontract is being solicited to provide third-party cybersecurity support for implementing, auditing, and documenting NIST SP 800-171 controls on information systems that handle Controlled Unclassified Information related to the CCA. The work is required to ensure full compliance with federal cybersecurity standards for the prime contractor’s systems, with deliverables focused on achieving and maintaining adherence to the outlined framework. Performance will be centered at NEW CUMBERLAND, PA, 17070-5002, and the effort is classified as a Total Small Business Set-Aside under SBA guidelines, ensuring only small businesses qualify to respond. The contract falls under NAICS code 541611 for Management Consulting Services, emphasizing advisory and implementation expertise in cybersecurity compliance. Proposals must be submitted by August 20, 2026, following the solicitation issued by the Department of Defense’s Active Devices Division, with all work aimed at securing CUI within the prime contractor’s environment through rigorous third-party validation and documentation.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

ESD-Safe & MIL-Compliant Packaging SupplyThe contract requires the supply of static-dissipative and moisture-barrier packaging materials that strictly comply with MIL-PRF-81705 and MIL-STD-2073-1E standards, specifically designed to safeguard electrostatic discharge-sensitive circuit card assemblies during storage and transport. All materials must meet rigorous military specifications to ensure protection against electrostatic discharge and environmental moisture, critical for maintaining the integrity and functionality of sensitive electronic components. The packaging solutions must be capable of consistent performance under varying conditions and be traceable to approved quality control protocols. This is a subcontract opportunity set aside exclusively for small businesses under the SBA’s Total Small Business Set-Aside program, with the NAICS code 326199 indicating it pertains to other plastic product manufacturing. The place of performance is designated as New Cumberland, Pennsylvania, with a zip code of 17070-5002, and the solicitation was posted on August 9, 2026, with responses due by August 20, 2026. The contracting office is part of the Active Devices Division within the Department of Defense, and the opportunity is accessible through the DIBBS platform, indicating a formal federal procurement process requiring full adherence to defense supply chain requirements.

All Other Plastics Product Manufacturing

POSTED

DEADLINE

Electronic Component Sourcing & SupplyThe contract entails the supply of commercial or military-grade electronic components including integrated circuits, resistors, capacitors, and connectors critical to the construction of circuit card assemblies, with strict requirements for full traceability throughout the supply chain and robust anti-counterfeit controls to ensure component integrity. Compliance with DFARS 252.204-7020 is mandatory, enforcing rigorous documentation and reporting standards to safeguard against counterfeit parts and maintain the security of defense-related electronics. All materials must meet defense-specified quality and sourcing criteria, with proven provenance and adherence to approved vendor lists. This is a total small business set-aside under FAR 19.5, restricted to small businesses as defined by the SBA, with the NAICS code 423490 for electronic component and office supplies merchant wholesalers. The procurement is managed by the Active Devices Division within the Department of Defense, with performance required at the specified location in New Cumberland, Pennsylvania, zip code 17070-5002. Responses are due by August 20, 2026, and the solicitation was posted on August 9, 2026, with potential bidders directed to the DIBBS platform for detailed submission requirements and further instructions.

Other Professional Equipment and Supplies Merchant Wholesalers

POSTED

DEADLINE

Circuit Card Assembly (CCA) ManufacturingThe contract requires the full lifecycle manufacturing of a circuit card assembly designated by NSN 5998015019986, encompassing all phases from design validation through final quality assurance. This includes sourcing qualified components, fabricating printed circuit boards, performing surface mount assembly, conducting rigorous testing, and ensuring compliance with stringent military standards. The work must be performed under a total small business set-aside, meaning only small businesses certified by the SBA are eligible to bid, and the North American Industry Classification System code 334418 confirms the focus on electronic component manufacturing. Performance is mandated to occur at New Cumberland, Pennsylvania, with a zip code of 17070-5002, and the contracting activity falls under the Department of Defense’s Active Devices Division. The solicitation was posted on August 9, 2026, with a firm response deadline of August 20, 2026, indicating a short but precise window for qualified small businesses to submit proposals. As a subcontracting opportunity, the winning vendor will likely fulfill a requirement for a prime contractor or direct government use, with the end product intended for defense applications. Although no point of contact is listed in the data, the official DIBBS platform link provides the primary channel for accessing full specifications and submission requirements. All activities must adhere to federal acquisition regulations and support the DoD’s commitment to domestic small business participation in critical electronics manufacturing.

Printed Circuit Assembly (Electronic Assembly) Manufacturing

POSTED

DEADLINE

Hazardous Materials Compliance and SDS ManagementThe contract involves the preparation and ongoing management of Safety Data Sheets for defense-qualified connectors, ensuring full compliance with federal hazardous materials regulations. This subcontract requires precise documentation and continuous monitoring to meet Department of Defense safety and regulatory standards, specifically for connectors used in defense applications. The work must be executed in alignment with applicable federal, state, and industry guidelines to maintain the integrity and safety of materials handling, storage, and transportation. Performance is centered at Cherry Point, North Carolina, with a strict submission deadline of August 20, 2026, following a posting date of August 9, 2026. The contract falls under NAICS code 541690, which designates other scientific and technical consulting services, indicating the need for specialized expertise in regulatory compliance and chemical safety documentation. As a subcontract within the defense supply chain, adherence to strict compliance protocols is non-negotiable, and the selected provider must demonstrate a proven ability to manage complex hazardous material documentation under defense contract requirements.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

Domestic and International Freight Logistics (FOB Origin)The contract entails the domestic and international transportation of connector assemblies from the manufacturer to the Defense Logistics Agency facility at Cherry Point, North Carolina, under FOB origin terms, meaning the buyer assumes responsibility for the goods once they leave the seller’s location. All shipments must comply with defense-specific documentation standards and include full tracing and tracking capabilities to ensure accountability and security throughout transit. The work is classified as a subcontract under NAICS code 484220, which covers truck transportation for specialized freight. The opportunity was posted on August 9, 2026, with a response deadline of August 20, 2026, and is managed by the Active Devices Division of the Department of Defense. Performance is designated specifically at the Cherry Point location with zip code 28533-5040, and all logistics must meet the stringent requirements of military supply chain protocols.

Specialized Freight (except Used Goods) Trucking, Local

POSTED

DEADLINE

Specialized Packaging and Marking ServicesThe contract requires specialized packaging, labeling, and marking services for connector assemblies to meet military compliance standards, including the application of hazardous material warnings and unique identification (UID) markings as mandated by defense requirements. All work must adhere strictly to federal and military specifications to ensure proper handling, traceability, and safety throughout the supply chain, with a focus on durability and clarity under operational conditions. The place of performance is designated as Cherry Point, North Carolina, with the deliverables intended for use within Department of Defense systems. The solicitation is issued as a subcontract under NAICS code 541380, with a response deadline of August 20, 2026, and was posted on August 9, 2026. The contract is managed by the Active Devices Division under the Department of Defense, though no set-aside provisions are specified, and the opportunity is open to qualified subcontractors capable of meeting the technical and regulatory demands of military-grade packaging and identification. All submissions must align with the requirements outlined in the DIBBS procurement system under reference number SPE7M526T398Q.

Testing Laboratories and Services

POSTED

about 8 hours ago

DEADLINE

in 11 days

View Details