Cloud Service Provider (FedRAMP Moderate)

The contract establishes a subcontract for a cloud service provider to deliver FedRAMP Moderate-compliant hosting services for systems that process, store, or transmit covered defense information. The provider must ensure the infrastructure meets all federal security requirements for moderate impact systems, including continuous monitoring, automated security controls, and adherence to NIST SP 800-53 controls. Critical capabilities include timely incident reporting, forensic access to system logs and environment data, and the ability to support investigative and response actions for cybersecurity events involving protected defense data. Performance is tied to compliance with Department of Defense standards, and the services must be delivered through a secure, accredited cloud environment authorized under the FedRAMP program. The contract is managed under the Defense Logistics Agency and falls under NAICS code 518210 for data processing, hosting, and related services, with performance expected to support defense-wide mission needs without geographic limitations.