Cybersecurity & CUI Compliance Support

The contract requires implementation and ongoing maintenance of NIST SP 800-171 security controls to protect controlled unclassified information within the contractor’s systems. Compliance with these controls is mandatory to ensure alignment with Department of Defense cybersecurity standards. The contractor must promptly report any cyber incidents through the Defense Industrial Base Cybersecurity and Information Assurance portal, DIBNet, adhering to established timelines and reporting protocols. Preservation of all forensic media related to identified incidents is required for a minimum of 90 days after the incident occurs, ensuring readiness for investigation, analysis, or audit by authorized government entities. This work is performed as a subcontract under the Defense Logistics Agency, categorized under NAICS code 541512 for computer systems design services, with performance expected in support of broader DoD cybersecurity objectives.