Cybersecurity & Covered Defense Information (CDI) Safeguarding

The contract requires the implementation of all NIST SP 800-171 security controls to safeguard Covered Defense Information, ensuring compliance with Department of Defense cybersecurity standards. The contractor must develop and maintain a comprehensive System Security Plan that documents the implementation of these controls, demonstrating alignment with federal requirements for protecting sensitive unclassified information. Incident reporting obligations under DFARS 252.204-7012 must be fulfilled promptly and accurately, including the timely notification of any cyber incidents affecting Covered Defense Information. All work is performed under a subcontract awarded by the Defense Logistics Agency, with the North American Industry Classification System code 541512 indicating information technology services. The contract is positioned to support the broader mission of the Department of Defense by enforcing consistent and robust cybersecurity practices across the supply chain.