Cybersecurity and Covered Defense Information Safeguarding

The contract mandates the implementation of NIST SP 800-171 cybersecurity controls to safeguard Covered Defense Information (CDI) against unauthorized access, disclosure, or compromise, ensuring alignment with the Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012. This includes establishing and maintaining security measures across systems and processes that handle CDI, covering areas such as access control, audit and accountability, configuration management, identification and authentication, and incident response. Compliance with these controls is mandatory and must be documented and verified as part of ongoing operational requirements. In addition to cybersecurity measures, the contract requires personnel to complete antiterrorism training to enhance situational awareness and mitigate risks associated with potential threats. The work is being performed under a subcontract awarded by the Defense Logistics Agency, a component of the Department of Defense, and is classified under NAICS code 541512 for computer systems design services. The performance location and specific point of contact are not detailed, but all activities must adhere to federal cybersecurity and defense standards as outlined in the applicable regulations and guidance.