Cybersecurity and Covered Defense Information Safeguarding

This contract mandates the implementation of DFARS 252.204-7012 requirements to ensure the protection of covered defense information and the timely reporting of cyber incidents. It applies to a subcontract under the Department of Defense and requires the contractor to establish and maintain robust cybersecurity controls consistent with NIST SP 800-171 to safeguard sensitive information. The contractor must promptly report any cyber incidents affecting covered defense information to the Department of Defense and cooperate with any ensuing investigations or remediation efforts. Compliance is mandatory throughout the performance of the subcontract, which is governed under NAICS code 541611 for management consulting services. The contract remains active through its performance period with the Defense Logistics Agency as the overseeing agency, and all cybersecurity obligations are binding regardless of the physical or geographical location of performance.