Cyber Incident Response and Reporting

The contract requires comprehensive cyber incident response capabilities focused on protecting Controlled Unclassified Information and Controlled Defense Information. The contractor must monitor systems for cyber threats, detect any incidents involving CUI/CDI, and report those incidents via DIBnet within 72 hours of discovery. Additionally, the contractor is obligated to preserve all forensic artifacts related to detected incidents for a minimum of 90 days to support potential investigations and analysis. Any detected malware must be submitted to the Defense Cyber Crime Center for further evaluation and threat intelligence sharing. This work is performed as a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, with the associated NAICS code reflecting professional, scientific, and technical services. The contract emphasizes timely reporting, evidence retention, and collaboration with federal cyber defense entities to ensure the security of sensitive defense data.