Cybersecurity & Covered Defense Information Safeguarding

The contract requires strict adherence to NIST SP 800-171 Rev 2 for safeguarding covered defense information, ensuring all cyber security controls are implemented to protect sensitive data handled under the agreement. Any cyber incident involving this information must be reported within 72 hours through the DIBNet portal to ensure timely response and compliance with Department of Defense requirements. The work falls under NAICS code 541512, indicating it pertains to custom computer programming services, and is structured as a subcontract within the broader defense supply chain. The contracting office is the SPRMM1 DLA Mechanicsburg, operating under the Department of Defense, and performance is expected to support defense-related functions without geographic restrictions specified. Compliance with these cybersecurity standards is mandatory and forms a core obligation of the subcontractor’s responsibilities.