Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires the implementation of NIST SP 800-171 security controls to safeguard covered defense information as mandated by DFARS 252.204-7012, ensuring that all protective measures are fully aligned with federal cybersecurity standards for contractors handling sensitive government data. This includes establishing robust access controls, encryption protocols, audit logging, and system integrity safeguards, along with the capability to promptly detect, report, and respond to cyber incidents in accordance with specified government reporting timelines and procedures. The work is structured as a subcontract under the Department of Defense, specifically tied to LSO Combat Vehicles and Armament, with performance required at the location in Tracy, California, with a zip code of 95304-5000. The solicitation is classified under NAICS code 541512, indicating it pertains to computer systems design services, and the response deadline is August 10, 2026. Compliance with these cybersecurity requirements is not optional and is critical for contract retention, with failure to meet the standards potentially resulting in termination or disqualification. All systems and processes must be configured to meet and sustain NIST SP 800-171 requirements at all times during contract performance.