Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard covered defense information against unauthorized access, disclosure, or compromise. Compliance is mandatory, with a specific emphasis on meeting the Defense Federal Acquisition Regulation Supplement (DFARS) requirements for timely incident reporting in the event of a cybersecurity breach or suspicious activity. The work must be performed at the specified place of performance in San Diego, California, with a focus on ensuring the integrity, confidentiality, and availability of sensitive government information. This subcontract, issued under NAICS code 541512 for Computer Systems Design Services, is managed by the Active Devices Division within the Department of Defense. Interested parties must submit responses by August 6, 2026, with no set-aside provisions indicated. The contract underscores the critical need for robust cybersecurity posture and regulatory adherence, requiring continuous monitoring, documentation, and reporting mechanisms aligned with federal standards to protect classified and controlled unclassified information within the defense industrial base.