Cybersecurity Compliance for Covered Defense Information

This contract requires the implementation of NIST SP 800-171 controls to safeguard covered defense information across all applicable systems and environments. The scope includes ensuring full compliance with the security requirements outlined in the NIST publication, covering areas such as access control, audit and accountability, configuration management, and incident response. The contractor must conduct a thorough system assessment to validate adherence to these controls and establish documented processes for identifying, reporting, and responding to cybersecurity incidents in a timely and coordinated manner. All activities must be performed in alignment with Department of Defense standards and directives governing the protection of sensitive defense data. The contract is a subcontract under the ASC Commodities Division of the Department of Defense, with performance required at a location in San Diego, CA, with a zip code of 92136-3581. The North American Industry Classification System code is 541512, indicating a focus on computer systems design and related services. The solicitation was posted on August 5, 2026, and responses are due by August 13, 2026. The contract demands rigorous documentation, continuous monitoring, and the ability to demonstrate compliance upon request, with an emphasis on maintaining the integrity and confidentiality of covered defense information throughout the contract lifecycle.