Cyber Incident Response & Reporting Services

The contract requires the provision of cyber incident response and reporting services with a strict 72-hour window for reporting incidents to the Defense Counterintelligence and Security Agency. It mandates the forensic preservation of all relevant data, the collection of malware samples, and the secure submission of these materials using medium assurance certificates to ensure authentication and integrity throughout the process. This work is critical for maintaining situational awareness and enabling timely threat response within Department of Defense networks. The service is structured as a subcontract under the North American Industry Classification System code 541990, and the contracting activity is managed by the Defense Logistics Agency under the Department of Defense. Although the specific location of performance is not detailed, the requirements apply to incidents affecting DoD systems regardless of geographic scope. The contract is designed to support rapid, standardized, and secure cyber incident handling aligned with federal and defense cybersecurity protocols.