Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires implementation of NIST SP 800-171 security controls to safeguard covered defense information in compliance with DFARS 252.204-7012, ensuring all required cybersecurity measures are properly applied to systems handling sensitive government data. This includes the full development of a System Security Plan documenting the implementation of controls, ongoing validation of compliance, and accurate reporting through the Supplier Performance Risk System to demonstrate adherence to DoD cybersecurity requirements. The effort is focused on securing information systems that process, store, or transmit covered defense information and must align precisely with federal mandates to maintain eligibility for contract performance. This subcontract is issued under the Department of Defense and is categorized under NAICS code 541512 for computer systems design services, with performance tied to the location in Tracy, California, zip 95304-5000. The solicitation is open for response until July 30, 2026, and is specifically targeted at organizations capable of rapidly deploying and documenting a compliant cybersecurity posture. The requirement is not open to broad competition and is part of a broader effort to enforce strict cybersecurity standards across the defense supply chain, making timely submission and proven experience with NIST 800-171 and SPRS reporting essential for eligibility.