Covered Defense Information (CDI) Cybersecurity Compliance

The contract requires implementation of NIST SP 800-171 security controls to protect Covered Defense Information throughout the entire performance period and during data submission. This subcontract mandates strict adherence to federal cybersecurity standards to ensure the confidentiality, integrity, and availability of sensitive defense data handled by the contractor. Compliance is non-negotiable and applies to all systems, networks, and personnel involved in contract execution, regardless of location or infrastructure. The contract is issued under the Defense Logistics Agency within the Department of Defense and is classified under NAICS code 541512, indicating it pertains to computer systems design services. While specific performance location and point of contact details are not provided, the obligation to meet NIST SP 800-171 requirements is binding and extends to all phases of subcontract performance. Failure to implement and maintain these controls may result in contract termination, financial penalties, or loss of future procurement eligibility.