Cybersecurity and Covered Defense Information (CDI) Compliance

The contract requires the implementation of NIST SP 800-171 security controls to protect Covered Defense Information (CDI) across all contractor systems, ensuring adherence to the stringent cybersecurity requirements mandated by DFARS 252.204-7012 and 7014. This includes establishing robust safeguards for the storage, processing, and transmission of CDI, as well as instituting procedures for timely detection, reporting, and response to cyber incidents involving protected data. Compliance is non-negotiable and must be maintained throughout the lifecycle of the subcontract, with continuous monitoring and documentation to demonstrate alignment with federal cybersecurity standards. The subcontract falls under NAICS code 541512, indicating its alignment with computer systems design and related services, and is administered by the Defense Logistics Agency under the Department of Defense. While specific performance locations and point of contact details are not provided, the obligation applies to all systems handling CDI regardless of physical or virtual placement. The contract emphasizes full technical and procedural compliance with federal cybersecurity frameworks, requiring contractors to not only implement necessary controls but also to maintain auditable records and respond immediately to any security breaches affecting covered information.