Cybersecurity Compliance (NIST SP 800-171)

The contract requires implementation of NIST SP 800-171 controls to protect covered defense information, ensuring all required security measures are properly established and maintained throughout the performance period. This includes the mandatory reporting of any cyber incidents that may compromise the integrity, confidentiality, or availability of the information. The work is a subcontract under a Total Small Business Set-Aside, designated for small businesses as defined by the SBA, and falls under NAICS code 541512 for computer systems design services. Performance must occur at the location in Tracy, California with the zip code 95304-5000. The solicitation was posted on July 30, 2026, and responses are due by August 10, 2026. The contracting activity is managed by the Department of Defense under the Maritime Supply Chain office.