Cybersecurity Compliance for Covered Defense Information

The contract requires implementation and maintenance of NIST SP 800-171 cybersecurity controls on systems that process, store, or transmit covered defense information, ensuring compliance with federal standards for protecting sensitive military data. Contractors must conduct regular self-assessments to validate control effectiveness and promptly report any cybersecurity incidents in accordance with established protocols, maintaining continuous defense posture and accountability. All activities must be performed at the designated location in San Diego, California, with performance expectations tied to strict adherence to the NIST framework and timely submission of compliance documentation. This is a small business set-aside subcontract under the SBA program, reserved exclusively for total small businesses as defined by FAR 19.5, with the NAICS code 541512 indicating it falls under computer systems design and related services. The solicitation was posted July 14, 2026, with responses due by July 22, 2026, and is issued by the Department of Defense through the DLA Receiving Officer at Naval Base Coronado. Contractors must ensure their systems, processes, and personnel meet all regulatory requirements to safeguard covered defense information throughout the contract lifecycle, with noncompliance potentially resulting in contract termination or penalties.