Cyber Incident Response and Media Preservation Support

This contract provides rapid response support for cyber incidents involving Controlled Defense Information, requiring immediate forensic data collection and strict adherence to a 72-hour reporting window to the Department of Defense. The contractor must ensure the integrity and availability of system media throughout the incident response lifecycle and preserve all relevant digital evidence for a minimum of 90 days following the incident. The work is performed under a subcontract for the Defense Logistics Agency, operating under the broader authority of the Department of Defense, with a primary focus on maintaining operational security and compliance with federal cyber incident response protocols. The North American Industry Classification System code 541511 indicates the scope is centered on computer systems design and related services, emphasizing technical expertise in digital forensics and cybersecurity incident management.