Cybersecurity Compliance (NIST SP 800-171 / DFARS 252.204-7012)

The contract requires the implementation and thorough documentation of NIST SP 800-171 security controls to protect Covered Defense Information and ensure full compliance with DFARS 252.204-7012 requirements. This includes establishing and maintaining a security framework that meets federal standards for safeguarding sensitive information handled by defense contractors, along with preparing for and successfully completing the Supplier Performance Risk System assessment to validate compliance posture. All activities must be conducted in alignment with the specified criteria, with documentation demonstrating control implementation, continuous monitoring, and remediation processes as needed. The work is scoped as a subcontract under the Department of Defense’s ASC Commodities Division, with performance to occur at Tracy, California, 95304-5000. The solicitation was posted on July 21, 2026, and responses are due by July 29, 2026. The NAICS code 541512 indicates the primary focus is on computer systems design services, suggesting the contractor must provide technical expertise in cybersecurity implementation, policy alignment, and documentation. While no set-aside designation is specified, the contract demands rigorous adherence to DoD cybersecurity mandates without room for deviation, and all deliverables must support official SPRS reporting requirements to ensure contract standing and continued eligibility for future defense work.