Cybersecurity & Covered Defense Information (CDI) Safeguarding

The contract entails the implementation and ongoing maintenance of cybersecurity controls outlined in NIST Special Publication 800-171 for systems that handle Covered Defense Information, ensuring compliance with federal standards for protecting sensitive government data. This includes establishing technical, administrative, and physical safeguards to secure information systems against unauthorized access, disclosure, or compromise, and maintaining continuous monitoring and documentation to demonstrate adherence to those controls. The contractor is responsible for ensuring all applicable NIST 800-171 requirements are fully integrated into the system environment and remain effective throughout the duration of the agreement. Additionally, the contract mandates immediate reporting of any cyber incidents involving Covered Defense Information in accordance with the DFARS clause 252.204-7012, requiring prompt notification to the Department of Defense and cooperation in forensic investigation and remediation efforts. This obligation extends to maintaining accurate records of system configurations, access logs, and incident responses to support audits and compliance reviews. The work is performed under a subcontract managed by the Defense Logistics Agency, with the North American Industry Classification System code 541512 indicating information technology services, and the performance location remains unspecified but is expected to align with the contractor’s operational environment supporting Department of Defense systems.