Cybersecurity and CDI Compliance Support

The contract requires comprehensive cybersecurity compliance oversight for systems that handle Covered Defense Information, with a focus on implementing NIST SP 800-171 controls, ensuring adherence to DFARS 252.204-7012 requirements, and managing timely incident reporting. The provider must establish and maintain robust cybersecurity practices to protect sensitive data, conduct ongoing monitoring and assessment of compliance posture, and respond effectively to cybersecurity events in accordance with federal defense standards. All activities must align with the Department of Defense’s mandated frameworks to safeguard information systems from unauthorized access, disclosure, or compromise. This subcontract falls under the NAICS code 541512 for computer systems design services and is administered by the Defense Logistics Agency under the Department of Defense. The work is tied to contract W91CRB21D0023 and solicitation SPE1C126F4940, with performance expected to support defense-critical infrastructure regardless of a specific geographic location. The contractor is responsible for sustaining continuous compliance, documenting all security controls, and providing audit-ready evidence of adherence to federal cybersecurity regulations throughout the contract term.