Cybersecurity for Covered Defense Information (CDI)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Covered Defense Information (CDI) handled by the contractor. This includes completing system assessments to verify compliance, establishing continuous monitoring capabilities to detect and respond to threats, and fulfilling mandatory cyber incident reporting obligations as stipulated under DFARS 252.204-7012. All activities must ensure the confidentiality, integrity, and availability of CDI throughout the system lifecycle, with a focus on meeting federal cybersecurity standards for defense-related information. The contract is classified as a subcontract under NAICS code 541512, with performance expected to occur in Tracy, California, at a ZIP code of 95304-5000. Proposals must be submitted by August 10, 2026, following the posting date of July 30, 2026. The contracting activity falls under the Department of Defense, specifically the LAND SUPPLIER OPNS VEHICLE SPT office, and the work is intended to support defense supply chain cybersecurity requirements. Compliance with the specified controls and reporting mechanisms is non-negotiable and critical to contract execution and continued eligibility for future work.