Cybersecurity Compliance for Covered Defense Information

The contract requires comprehensive implementation and documentation of NIST SP 800-171 security controls to protect covered defense information, ensuring full compliance with federal cybersecurity standards for contractors handling sensitive DoD data. The work involves aligning systems, policies, and procedures with the 110 controls outlined in NIST SP 800-171, including the establishment of technical, administrative, and physical safeguards, as well as maintaining detailed documentation to demonstrate adherence. The contractor must also prepare for third-party assessments and maintain readiness for audit or evaluation to verify compliance. In addition to control implementation, the contract mandates strict adherence to DFARS 252.204-7012 requirements for cyber incident reporting, obligating timely notification of any security breaches or anomalies affecting covered defense information. Performance is tied to the location of San Diego, California, with the work falling under the NAICS code for computer systems design services. The subcontract is solicited by the Department of Defense’s ASC Supplier Oper OEM Division and requires a response by July 30, 2026, with all deliverables focused on achieving and sustaining a validated state of cybersecurity compliance for defense-related data handling.