Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation of NIST SP 800-171 security controls to safeguard Covered Defense Information and ensure compliance with cyber incident reporting obligations under DFARS regulations. This subcontract is focused on establishing a secure environment that meets federal cybersecurity standards for handling sensitive defense data, with specific attention to protecting information systems from unauthorized access, use, disclosure, disruption, modification, or destruction. The awardee must demonstrate the ability to fully comply with the 110 security requirements outlined in NIST SP 800-171 and maintain ongoing adherence to these controls throughout the contract period. Performance of this work is centered at Tracy, California, with a response deadline of July 28, 2026, and the contract is classified under NAICS code 541512 for computer systems design services. The contracting office falls under the Department of Defense, specifically the ASC SUPPLIER OPER OEM DIVISION, and the subcontractor must be prepared to support all aspects of cyber incident reporting as mandated, including timely notification, containment, and documentation of any security breaches affecting Covered Defense Information. Compliance is not optional and failure to meet these requirements may result in contract termination or other penalties.