Cybersecurity Safeguarding and Incident Reporting

The contract requires the implementation of NIST SP 800-171 security controls to safeguard covered defense information on systems operated by the contractor, including conducting a self-assessment to verify compliance with these controls and establishing procedures for timely cyber incident reporting in accordance with federal requirements. The work is scoped to support systems handling sensitive defense data and demands adherence to strict cybersecurity standards to ensure the integrity, confidentiality, and availability of information. The subcontract is under the Department of Defense, managed by the Active Devices Division, with performance expected to occur in Tracy, California, at the specified ZIP code. Bidders must respond by the deadline of August 3, 2026, and the contract is classified under NAICS code 541512, indicating it relates to computer systems design services. There is no set-aside designation, meaning the opportunity is open to all eligible vendors. The solicitation is issued as a subcontract, suggesting the winning party will support a larger prime contract or program within the defense supply chain. The specific point of contact details are not provided, but the official solicitation can be accessed through the DIBBS platform using the provided link.