Cybersecurity and CUI Compliance Support

The contract requires the implementation and ongoing maintenance of a cybersecurity system to protect covered defense information in accordance with DFARS 252.204-7012, ensuring full compliance with the security controls outlined in NIST SP 800-171. This includes establishing, documenting, and enforcing policies and procedures to safeguard controlled unclassified information stored, processed, or transmitted on internal systems, as well as maintaining continuous monitoring and assessment of security measures. The contractor must also be prepared to detect, report, and respond to cybersecurity incidents promptly, fulfilling all federal reporting obligations within the required timeframes and providing detailed documentation to support incident investigations. The work is performed as a subcontract under the Department of Defense through the Defense Logistics Agency, with the North American Industry Classification System code 541512 indicating it falls under computer systems design services. The contract emphasizes adherence to federal cybersecurity standards and demands a robust, auditable approach to information protection, with no set-aside provisions specified. Performance is expected to meet DOD requirements regardless of geographic location, and the subcontractor must operate with the highest level of accountability to ensure the integrity and confidentiality of sensitive defense data.