Cybersecurity for Covered Defense Information

The contract requires implementation of NIST SP 800-171 security controls to protect covered defense information and mandates timely reporting of any cyber incidents in accordance with DFARS 252.204-7012. This subcontract is tied to the Department of Defense and is focused on ensuring compliance with federal cybersecurity standards for handling sensitive information. The work must be performed at a specified location in Tracy, California, with a zip code of 95304-5000, and is classified under NAICS code 541611, indicating it relates to management consulting services, likely involving cybersecurity advisory or implementation support. The solicitation was posted on July 30, 2026, with a firm response deadline of August 10, 2026, leaving a narrow window for potential contractors to submit proposals. The contract is issued through the Defense Logistics Agency’s DIBBS system under solicitation number SPE8EN26T2754, and while no set-aside type is specified, it is explicitly structured as a subcontract, meaning the awardee will be working under a prime contractor rather than directly with the government. Compliance with all NIST and DFARS requirements is non-negotiable, and any failure to meet these cybersecurity obligations could result in contract termination or penalties.