Defense Industrial Base Cybersecurity Compliance

The contract requires the implementation and comprehensive documentation of NIST SP 800-171 controls to safeguard controlled unclassified information within the defense industrial base, ensuring full compliance with DFARS requirements. This includes developing a detailed System Security Plan and a Plan of Action and Milestones to identify, prioritize, and remediate security gaps, all tailored to protect CUI handled by subcontractors supporting Department of Defense operations. The work must be executed with precision to meet federal cybersecurity standards and demonstrate auditable evidence of control adherence. Performance is to be conducted at a specified location in San Diego, California, with a tightly defined timeline—responses due by June 30, 2026, following a posting date of June 25, 2026. The solicitation is classified as a subcontract under NAICS code 541512, indicating it falls within computer systems design services. The ordering activity is the ASC Commodities Division under the Department of Defense, and the effort is focused on enabling secure information handling across the defense supply chain without specifying set-aside provisions or point of contact details.