Cybersecurity Compliance for Covered Defense Information

The contract requires implementation of NIST SP 800-171 security controls and adherence to cyber incident reporting requirements under DFARS 252.204-7012 for any systems handling covered defense information. This subcontract is focused on ensuring that all applicable cybersecurity safeguards are fully deployed and operational to protect sensitive contract-related data from unauthorized access, disclosure, or compromise. Compliance is mandatory and must be demonstrated through documented policies, procedures, and technical configurations that align with the NIST framework. The work is to be performed at a location in Tracy, California, with a zip code of 95304-5000, and is classified under NAICS code 541512 for computer systems design services. The solicitation was posted on July 16, 2026, with responses due by July 24, 2026, and is issued by the ASC Commodities Division under the Department of Defense. Contractors must be prepared to validate their compliance posture and maintain readiness for incident reporting as required by federal regulations, with performance evaluated against strict cybersecurity standards governing defense contracting environments.