Cybersecurity Compliance for Covered Defense Information

This contract requires the implementation of NIST SP 800-171 cybersecurity safeguards for any covered defense information handled under the agreement. The subcontractor must ensure full compliance with all specified security controls outlined in the NIST publication to protect sensitive data from unauthorized access, disclosure, or compromise. Additionally, any detected cyber incident involving covered defense information must be reported to the appropriate authorities within 72 hours of discovery, with no exceptions or delays permitted. The contract is tied to a specific place of performance in Tracy, California, with a ZIP code of 95304-5000, and falls under the NAICS code 541512 for computer systems design services. The contract type is a subcontract, and it was posted by the Fluid Handling Division of the Department of Defense, with a response deadline of August 3, 2026. All work must be performed with strict adherence to federal cybersecurity requirements and incident response protocols as mandated for defense contractors.