Cyber Incident Reporting and CUI Safeguarding (IT Compliance)

This contract requires the implementation of NIST SP 800-171 security controls to safeguard Covered Defense Information and ensure compliance with DFARS requirements for cyber incident reporting. The work focuses on establishing and maintaining a robust cybersecurity posture to protect controlled unclassified information processed, stored, or transmitted by the contractor. All necessary technical and procedural measures must be aligned with federal standards to detect, respond to, and report cyber incidents affecting CDI in a timely and compliant manner. The contract is classified as a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, and falls under the NAICS code 541512 for computer systems design services. Performance is expected to comply with all applicable federal cybersecurity regulations, with no geographical restriction specified for the place of performance. The initiative is designed to ensure continuous compliance with defense information protection standards and to support the broader DoD objective of securing sensitive data across its supply chain.