Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation of cybersecurity controls aligned with NIST SP 800-171 and DFARS requirements to protect Controlled Unclassified Information (CUI) and ensure compliance with incident reporting obligations. This subcontract is focused on securing sensitive defense-related data by enforcing standardized security measures across systems and processes that handle CUI, with strict adherence to the specified regulatory frameworks. The awardee must demonstrate the ability to meet technical and procedural standards for data protection, access control, audit logging, and timely notification of cybersecurity incidents. Performance is expected to take place in Tracy, California, with a response deadline of August 13, 2026, and the solicitation posted on August 5, 2026. The contract falls under NAICS code 541512, which pertains to computer systems design services, indicating the work involves technical implementation and integration of cybersecurity safeguards. The contracting activity is under the ASC Commodities Division of the Department of Defense, and while no set-aside designation is specified, the requirement is intended for a subcontractor capable of delivering compliant cybersecurity infrastructure and operational procedures tailored to defense information standards.