Cybersecurity & Compliance Support (Flow-Down to Supplier)

The contract requires strict adherence to NIST SP 800-171 and DFARS 252.204-7012 standards for all systems handling contract-related data, enforcing robust cybersecurity controls to protect controlled unclassified information. Compliance includes implementing required security practices across the entire supply chain, with a mandatory requirement to report any cyber incidents to the Department of Defense within 72 hours of discovery. This subcontract flows down these obligations to suppliers, ensuring end-to-end alignment with federal cybersecurity mandates. The work is performed under the Defense Logistics Agency, part of the Department of Defense, and falls under NAICS code 541512 for computer systems design services, with performance tied to federal defense contract requirements.