Cybersecurity & Covered Defense Information (CDI) Safeguarding

This contract requires the implementation of NIST SP 800-171 controls to safeguard covered defense information and ensure timely reporting of cyber incidents, in compliance with DFARS requirements. The subcontractor must establish and maintain a robust cybersecurity posture aligned with federal standards to protect sensitive data transmitted or stored as part of Department of Defense activities. Compliance is non-negotiable and applies to all systems handling covered defense information, with continuous monitoring and incident reporting protocols to be in place. The work is performed under the authority of the Defense Logistics Agency, part of the Department of Defense, and is tied to the NAICS code 541519, which relates to other computer-related services. While the specific location of performance is not detailed, the obligation extends to all environments where covered defense information is processed, stored, or transmitted. The subcontractor is accountable for meeting all cybersecurity obligations without exception, and failure to comply may result in contractual penalties or loss of eligibility for future DoD work.