Cybersecurity Compliance for Covered Defense Information

The contract requires implementation and maintenance of NIST SP 800-171 controls to safeguard covered defense information, ensuring compliance with federal cybersecurity standards for contractors handling sensitive DoD data. This includes ongoing responsibilities for cyber incident reporting in accordance with required protocols and the continuous upkeep of a comprehensive System Security Plan that documents control placement, management, and monitoring. The work is classified as a subcontract under NAICS code 541512 and is performance-based at a location in Tracy, California, with a zip code of 95304-5000. All activities must be completed by the response deadline of August 17, 2026, and are tied to the Department of Defense under the ASC SUPPLIER OPER AE AND AF DIV. Compliance is non-negotiable and forms the core obligation of the subcontractor, with failure to meet requirements potentially impacting contract standing and eligibility for future opportunities.