Cybersecurity and Covered Defense Information (CDI) Safeguarding

This contract obligates the subcontractor to implement robust cybersecurity measures designed to protect covered defense information as defined under the Defense Federal Acquisition Regulation Supplement, specifically DFARS 252.204-7012. The scope requires the establishment of security controls aligned with NIST SP 800-171 to ensure the confidentiality, integrity, and availability of sensitive information handled in support of Department of Defense operations. Compliance with all specified cybersecurity requirements is mandatory, including the timely reporting of any cyber incidents involving covered defense information through the designated DoD reporting portal. The contract is structured as a subcontract under the Defense Logistics Agency, falling under the NAICS code 541512 for computer systems design services. Performance is expected to support national defense objectives, though the precise location of performance is not specified. All activities must adhere strictly to federal cybersecurity mandates, with failure to comply potentially resulting in contractual penalties, loss of access to controlled information, or termination. The subcontract is active as of its posting date in July 2026 and remains subject to ongoing oversight to verify adherence to the mandated safeguarding and reporting protocols.