Cybersecurity for Covered Defense Information (CDI) Safeguarding

This contract requires the implementation of NIST SP 800-171 controls to safeguard covered defense information, ensuring compliance with federal cybersecurity standards for protected data handled by subcontractors. The scope includes developing and maintaining a system security plan, applying required security controls, and establishing procedures for timely cyber incident reporting within 72 hours of discovery. The work must be performed at the designated location in Tracy, California, with a zip code of 95304-5000, and falls under NAICS code 541512, indicating it relates to computer systems design services. The contract is classified as a subcontract within the Department of Defense structure, managed by DLA Dist San Joaquin, and is open for response until August 3, 2026, with a posted date of July 23, 2026. Compliance with all NIST controls is mandatory to meet contractual obligations and protect sensitive defense information from unauthorized access or exposure.