Cybersecurity for Covered Defense Information

The contract requires the implementation of NIST SP 800-171 security controls to protect covered defense information within the scope of the subcontract, ensuring alignment with Department of Defense cybersecurity standards. All parties must adhere to the cyber incident reporting requirements mandated by DFARS clauses, including timely notification and coordination in the event of a security breach or compromise involving sensitive information. Compliance is non-negotiable and extends to all systems, networks, and personnel handling covered defense data under this agreement. The work is performance-based and tied to a specific location in Tracy, California, with a ZIP code of 95304-5000. The solicitation falls under NAICS code 541512, indicating it relates to computer systems design services, and is issued by the ASC Commodities Division of the Department of Defense. Subcontractors must submit responses by July 17, 2026, with the solicitation posted on July 14, 2026. The nature of the contract as a subcontract implies that the prime contractor is responsible for ensuring subcontractor compliance with all cybersecurity obligations and incident reporting protocols.