Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and assessment of cybersecurity controls aligned with NIST Special Publication 800-171 to safeguard Controlled Unclassified Information (CUI) on systems governed by Defense Federal Acquisition Regulation Supplement (DFARS) requirements. The work is scoped to ensure full compliance with the specified security controls, including technical, administrative, and physical safeguards necessary to protect CUI during processing, storage, and transmission. The subcontractor must conduct a thorough evaluation of existing systems, identify gaps in current cybersecurity posture, and execute necessary improvements to achieve and sustain compliance. Performance is expected to be carried out at the location in Tracy, California, with a zip code of 95304-5000, and the project falls under the NAICS code 541512 for Computer Systems Design Services. The solicitation was posted on July 5, 2026, with a strict response deadline of July 16, 2026. This subcontract is issued under the Department of Defense through DLA Dist San Joaquin and is intended to support the broader mission of securing sensitive government information within the defense supply chain. Compliance with NIST SP 800-171 is mandatory, and failure to meet the requirements will result in non-conformance and potential contract termination.