Cybersecurity and CUI Compliance (DFARS 252.204-7012)

The contract requires strict adherence to NIST SP 800-171 standards to safeguard Controlled Unclassified Information (CUI) throughout all phases of performance. As a subcontract under the Defense Logistics Agency, the contractor must implement a comprehensive cybersecurity framework that meets federal requirements for protecting CUI, including access controls, audit logging, configuration management, and incident response protocols. Failure to comply with these measures may result in breach of contract and potential penalties. All cyber incidents affecting CUI must be reported promptly in accordance with DFARS 252.204-7012, including thorough documentation and coordination with designated government authorities to ensure timely mitigation and remediation. The work is governed under NAICS code 541512 and performed in support of Department of Defense operations, with full accountability for maintaining the integrity, confidentiality, and availability of sensitive information at all times.