Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation, documentation, and assessment of cybersecurity controls to safeguard Covered Defense Information in compliance with NIST SP 800-171 and DFARS 252.204-7012. The work involves ensuring that all required security controls are properly deployed, maintained, and validated to meet federal standards for protecting sensitive defense data. The contractor must establish and document processes to continuously monitor and evaluate the effectiveness of these controls, providing evidence of compliance throughout the performance period. This subcontract is tied to a performance location in Tracy, California, with a ZIP code of 95304-5000, and is classified under NAICS code 541512 for computer systems design services. The opportunity was posted on July 5, 2026, with responses due by July 16, 2026. The contracting agency is the Department of Defense through the Land Supply Chain, indicating the work supports defense logistics and supply chain operations. All activities must align with the stringent cybersecurity requirements mandated for defense contractors handling controlled unclassified information.