Cybersecurity Compliance for Covered Contractor Systems

This contract requires the implementation of NIST SP 800-171 safeguarding controls across covered contractor systems to protect covered defense information, ensuring compliance with federal cybersecurity standards mandated for defense contractors. The contractor must establish, maintain, and regularly validate technical and administrative safeguards to secure sensitive data, as well as develop and execute procedures for timely cyber incident reporting in accordance with applicable government requirements. All activities must align with the strict protocols outlined in NIST SP 800-171, emphasizing confidentiality, integrity, and availability of information systems handling controlled unclassified information. The contract is classified as a subcontract under the SBA set-aside category, targeted toward small business entities, and is governed by NAICS code 541512 for computer systems design services. Performance is required at the location in Tracy, California, with a zip code of 95304-5000. The solicitation was posted on July 5, 2026, and responses must be submitted by July 16, 2026. The awarding agency is the Department of Defense under the Maritime Supply Chain organization, indicating the work directly supports national defense infrastructure and supply chain security initiatives.