NIST SP 800-171 Cybersecurity Compliance (CDI Handling)

The contract requires the implementation of NIST SP 800-171 security controls to safeguard Covered Defense Information (CDI) within the contractor’s systems and processes, ensuring compliance with Department of Defense cybersecurity standards. This includes establishing and maintaining technical, administrative, and physical safeguards to protect sensitive data from unauthorized access, disclosure, or modification, with a strong emphasis on continuous monitoring and control effectiveness. The contractor must also establish robust procedures for identifying, reporting, and responding to cyber incidents in a timely manner as mandated by the Defense Federal Acquisition Regulation Supplement. Performance is required at the location in Tracy, California with a zip code of 95304-5000, and the work falls under the NAICS code 541512 for Computer Systems Design Services. This is a subcontract under the Department of Defense, specifically managed by the ASC SUPPLIER OPER AE AND AF DIV, and responses must be submitted by July 29, 2026. The contract is not set aside for any specific small business category and is being procured through the DLA DIBBS system, indicating its inclusion in the broader supply chain security requirements for defense contractors handling sensitive government information.