Cybersecurity for Covered Defense Information (CDI)

The contract mandates the implementation of NIST SP 800-171 security controls and full compliance with DFARS 252.204-7012 to safeguard Covered Defense Information, ensuring all CUI is protected according to federal cybersecurity standards. This requires establishing robust access controls, encryption, audit logging, system integrity checks, and continuous monitoring practices across all relevant systems and networks. The contractor must also be prepared to respond to cybersecurity incidents with immediate reporting procedures and provide complete forensic data upon request, including artifacts, logs, and system images to support investigations by the Department of Defense. Execution of this subcontract is tied to the TRACY, CA location with a zip code of 95304-5000 as the primary place of performance. The work falls under NAICS code 541512, indicating it involves computer systems design services, and is structured as a subcontract under the ASC COMMODITIES DIVISION of the Department of Defense. Proposals must be submitted by the deadline of August 12, 2026, and all activities must align with the stringent requirements for handling sensitive defense information, including documentation, training, and readiness for audit or oversight activities by federal authorities.