Cybersecurity for Covered Contractor Information Systems

The contract requires the implementation of NIST SP 800-171 controls to ensure basic safeguarding of information systems that handle covered defense information, with a primary focus on developing a System Security Plan and enforcing robust access control measures. This effort is critical for maintaining the integrity, confidentiality, and availability of sensitive defense-related data within contractor systems, aligning with federal cybersecurity standards for defense contractors. The work involves comprehensive assessment, documentation, and operationalization of security controls to meet compliance requirements under the Defense Federal Acquisition Regulation Supplement. The contract is structured as a subcontract under the NAICS code 541512 for Computer Systems Design Services and is issued by the ASC Commodities Division of the Department of Defense, with performance required in San Diego, California, 92136-3581. Interested parties must submit responses by the deadline of July 30, 2026, and all work must adhere to the specified cybersecurity framework without deviation. The solicitation does not specify a set-aside classification, indicating it is open to all eligible subcontractors, and the primary objective is to secure and standardize information systems to protect covered defense information against evolving cyber threats.