Cybersecurity and Covered Defense Information (CDI) Compliance Support

The contract supports the implementation and ongoing maintenance of NIST Special Publication 800-171 security controls to protect covered defense information within the subcontractor’s systems, ensuring alignment with federal cybersecurity requirements for handling sensitive unclassified information. This includes establishing, documenting, and operationalizing technical and procedural safeguards required to meet the confidentiality, integrity, and availability standards mandated for defense-related data. The contractor is responsible for sustaining compliance through continuous monitoring, risk assessments, and corrective actions as new threats emerge or system configurations change. Additionally, the contract requires strict adherence to DFARS 252.204-7012, mandating prompt reporting of any cyber incidents affecting covered defense information to the Department of Defense. This involves identifying, containing, and reporting incidents within 72 hours, preserving evidence, and cooperating fully with government-led investigations. The work supports the Defense Logistics Agency’s broader mission to secure supply chain data and is performed under a subcontract with a NAICS code indicating information technology services. Compliance is not a one-time effort but an ongoing obligation requiring active management, training, and audit readiness to maintain eligibility for handling defense-related information.