Cybersecurity Compliance for Covered Defense Information (CDI)

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Covered Defense Information within the specified environment. The scope encompasses full compliance with DFARS requirements, including conducting system assessments to validate control effectiveness, maintaining thorough documentation of security policies and procedures, and establishing processes for timely cyber incident reporting. The work must be performed at the place of performance in Tracy, California, with a ZIP code of 95304-5000, and is classified as a subcontract under NAICS code 541512 for other computer-related services. Responsibility for meeting all cybersecurity obligations rests with the contractor, who must ensure continuous adherence to federal standards throughout the lifecycle of the contract. The solicitation was posted on July 16, 2026, with responses due by July 27, 2026, and is managed by the Department of Defense’s Land Supply Chain office.