Cybersecurity and Covered Defense Information (CDI) Safeguarding

This contract requires strict adherence to the cybersecurity standards outlined in DFARS 252.204-7012 for the protection of Covered Defense Information, mandating full compliance with the National Institute of Standards and Technology Special Publication 800-171. The subcontractor must implement a comprehensive set of security controls to safeguard sensitive information processed, stored, or transmitted on their systems, ensuring alignment with federal cybersecurity requirements for defense contractors. All systems handling Covered Defense Information must be configured to prevent unauthorized access, detect potential breaches, and maintain audit trails to support accountability and forensic analysis. The subcontractor is obligated to report any cybersecurity incidents involving Covered Defense Information within 72 hours of discovery to the Department of Defense, providing detailed information on the nature, scope, and impact of the incident. This includes preserving and protecting all forensic evidence and cooperating fully with any subsequent government investigation. The work under this subcontract falls under NAICS code 541512, indicating it involves computer systems design services for the Defense Logistics Agency, and performance is tied to Department of Defense operations, requiring continuous vigilance and proactive mitigation of cyber threats throughout the contract lifecycle.