Cybersecurity Compliance for Supplier Data Systems

The subcontract requires suppliers to align their information systems with NIST Special Publication 800-171 and the Defense Federal Acquisition Regulation Supplement clause DFARS 252.204-7012 to ensure the proper safeguarding of covered defense information. This includes implementing required security controls, maintaining continuous compliance, and promptly reporting any cyber incidents affecting systems handling such data. The obligation applies to all contractor and subcontractor systems processing, storing, or transmitting covered defense information, regardless of location. Performance is tied to the Tracy, California location with a zip code of 95304-5000, and the contract is classified under NAICS code 541611 for management consulting services. Responses must be submitted by August 3, 2026, following the July 22, 2026 posting date. As a Department of Defense subcontract under DLA Dist San Joaquin, compliance is mandatory for contract retention, with failure to meet cybersecurity requirements potentially resulting in termination or penalties.