Cybersecurity Compliance (NIST SP 800-171)

The contract requires implementation of NIST SP 800-171 security controls to protect covered defense information in accordance with DFARS 252.204-7012, ensuring robust cybersecurity measures are in place across all systems handling sensitive data. This includes mandatory procedures for identifying, reporting, and responding to cyber incidents, as well as enabling support for compliance assessments by government evaluators. The scope is focused on achieving and maintaining continuous compliance with federal cybersecurity standards for subcontractors engaged in defense-related work. The contract is designated as a subcontract under NAICS code 541512, with performance required at the location in Tracy, California, 95304-5000. It is managed by the ASC Commodities Division under the Department of Defense and was posted for response on July 6, 2026, with a firm deadline for submissions on July 14, 2026. All parties must adhere strictly to the NIST controls and reporting obligations, as failure to comply may result in contract penalties or loss of eligibility for future defense work.