Cybersecurity & CDI Compliance

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information across all systems and environments involved in the performance of work. Compliance with DFARS 252.204-7012 is mandatory, which includes establishing robust cybersecurity practices to safeguard sensitive data transmitted, stored, or processed under the agreement. The contractor must ensure that all technical, administrative, and physical safeguards outlined in NIST SP 800-171 are fully integrated and continuously monitored, with documentation to demonstrate adherence. Any cybersecurity incident affecting covered defense information must be reported promptly in accordance with DFARS requirements, including coordination with appropriate government agencies and timely submission of incident reports. This subcontract falls under NAICS code 541512, indicating it is for computer systems design and related services, and is issued by the Defense Logistics Agency under the Department of Defense. Performance is expected to support national defense objectives, with compliance obligations extending beyond initial implementation to include continuous assessment, monitoring, and adjustment of security measures. The contractor is responsible for maintaining audit-ready records and ensuring personnel are trained on cybersecurity protocols. Failure to meet these requirements may result in contract breach, financial penalties, or loss of eligibility for future defense contracts. The contract remains active and is accessible through the DIBBS platform under award number SPE4A026P2030.