Cybersecurity Compliance (NIST SP 800-171)

The contract requires full implementation and ongoing maintenance of NIST SP 800-171 controls to protect Covered Defense Information, ensuring compliance with federal cybersecurity standards for handling sensitive unclassified information within the defense supply chain. This includes establishing technical, administrative, and physical safeguards to secure CUI across all systems and environments, as well as enabling timely detection, reporting, and response to cyber incidents in accordance with DFARS 252.204-7012 requirements. All activities must align with the Department of Defense’s expectations for information security and must be consistently validated through documented processes and audits. The work is to be performed at the place of performance located in Tracy, California, with a zip code of 95304-5000, under a subcontract issued by the Active Devices Division of the Department of Defense. The solicitation, identified under NAICS code 541512 for Computer Systems Design Services, was posted on July 16, 2026, and responses are due by July 27, 2026. Participation is open without specific set-aside designations, and the responsible office is managed through the DLA BSM system under solicitation number SPE7M526T330Y. Compliance with all cybersecurity and reporting obligations is mandatory for contract fulfillment and continued eligibility for DoD-related work.