Subcontractor Cybersecurity Compliance Oversight

This subcontract focuses on ensuring that subcontractors handling Controlled Unclassified Information (CUI) comply with the cybersecurity requirements outlined in NIST SP 800-171. It requires maintenance of valid assessments in the Supplier Performance Risk System (SPRS) and mandates the oversight of the flow-down of Defense Federal Acquisition Regulation Supplement (DFARS) clauses related to cybersecurity. Additionally, the contract calls for conducting third-party cybersecurity audits to verify compliance. The work will be performed in Tracy, California, under the jurisdiction of the Department of Defense's Active Devices Division. The contract was posted on May 22, 2026, and responses are due by May 28, 2026. It falls under the NAICS code 541611, which pertains to administrative management and general management consulting services. The primary objective is to ensure subcontractor adherence to federal cybersecurity standards to protect sensitive defense information.