Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation of NIST SP 800-171 security controls to safeguard covered defense information and ensure full compliance with DFARS 252.204-7012, specifically mandating timely reporting of any cyber incidents affecting the confidentiality, integrity, or availability of sensitive data. The contractor must establish and maintain a robust cybersecurity framework aligned with NIST standards, including access controls, audit logging, system configuration management, and incident response protocols, all tailored to protect information handled under the Department of Defense contract. Compliance is non-negotiable and subject to verification, with failure to meet these requirements potentially leading to contract termination or penalties. This subcontract is issued under the NAICS code 541512 for computer systems design services by the Active Devices Division of the Department of Defense, with performance expected to occur at a designated location in Tracy, California, 95304-5000. The solicitation opened on July 23, 2026, and responses must be submitted no later than August 3, 2026. The work involves supporting critical defense infrastructure by ensuring secure handling of controlled unclassified information, and all activities must adhere strictly to federal cybersecurity mandates without deviation. Participation is open to entities capable of demonstrating proven experience in NIST 800-171 implementation and DFARS compliance within a defense contracting context.