Cybersecurity Compliance (NIST SP 800-171) for Covered Defense Information

The contract requires the implementation and documentation of cybersecurity safeguards outlined in NIST SP 800-171 for any systems that process, store, or transmit covered defense information, ensuring full compliance with DFARS 252.204-7012. This includes establishing robust security controls across the organization’s information systems, maintaining detailed documentation of implemented measures, and conducting regular assessments to verify adherence to the requirements. The contractor must also establish procedures for timely incident reporting in the event of a security breach or compromise involving covered defense information, in alignment with federal mandates. The work is to be performed at a designated location in Tracy, California, with a zip code of 95304-5000, and falls under the NAICS code 541512, indicating it is related to computer systems design services. This is a subcontract under the Department of Defense, specifically managed by LAND SUPPLIER OPNS VEHICLE SPT, with a response deadline of August 20, 2026. The solicitation is open to eligible subcontractors who can demonstrate the capability to meet the stringent cybersecurity obligations set forth by NIST and DFARS standards, with no specific set-aside classification indicated.