Cybersecurity for Covered Defense Information (CUI)

The contract requires implementation of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information (CUI) associated with hazardous material handling and reporting, as mandated by DFARS 252.204-7012. This subcontract is scoped to ensure compliance with federal cybersecurity standards for defense-related data, focusing on systems and processes that manage sensitive environmental and safety information. The work must be performed at the designated location in Tracy, California, with a zip code of 95304-5000, and adheres to the NAICS code 541512 for computer systems design services. The solicitation was posted on July 22, 2026, and responses are due by August 3, 2026, under the oversight of the DLA Dist San Joaquin office within the Department of Defense. The contract is classified as a subcontract and does not specify a set-aside type, indicating it is open to eligible contractors without restriction based on small business or other classifications. Compliance with all NIST controls related to access control, audit, configuration management, incident response, and data protection is required to meet the DFARS clause obligations for CUI protection, ensuring the secure handling of regulated hazardous material data throughout the contract lifecycle.