Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation of NIST SP 800-171 security controls to protect covered defense information and ensure full compliance with DFARS 252.204-7012, particularly regarding the reporting of cyber incidents. This subcontract is part of a Department of Defense initiative managed by the Active Devices Division, with performance centered in San Diego, California, at the specified zip code. The contractor must establish and maintain a secure information system environment that aligns with federal cybersecurity standards for handling sensitive defense data, including proper access controls, audit logging, incident response procedures, and continuous monitoring. All work under this subcontract must be completed and compliant by the response deadline of July 27, 2026, with the solicitation posted on July 16, 2026. The NAICS code 541512 indicates the work involves computer systems design and related services, suggesting the contractor will provide technical expertise to integrate, assess, and validate cybersecurity controls. Compliance is non-negotiable, as failure to meet these requirements may result in contract termination or other enforcement actions under DOD regulations. The place of performance is fixed, and the contractor must ensure all systems and processes are in place to meet reporting obligations for any cyber incidents affecting covered defense information.