Cybersecurity Compliance for Covered Contractor Information Systems

The contract requires the implementation and maintenance of NIST SP 800-171 security controls to protect covered contractor information systems that process, store, or transmit Controlled Unclassified Information. Compliance with these controls is mandatory to ensure the confidentiality, integrity, and availability of CUI in accordance with federal cybersecurity standards. The work must be performed at the specified place of performance in Tracy, California, with a zip code of 95304-5000, and is classified as a subcontract under NAICS code 541512, which pertains to custom computer programming services. The solicitation was posted on July 9, 2026, and responses are due by July 20, 2026, with the contracting agency being the DLA Dist San Joaquin under the Department of Defense. Contractors must ensure their systems and processes fully align with NIST requirements before and during performance, and ongoing monitoring and documentation of control effectiveness will be necessary to sustain compliance throughout the contract period.