Cybersecurity & CUI Compliance Support

The contract entails the implementation and ongoing maintenance of cybersecurity controls aligned with NIST Special Publication 800-171 to protect Covered Defense Information as mandated by DFARS 252.204-7012. This includes establishing, monitoring, and updating technical and administrative safeguards to ensure compliance with federal cybersecurity requirements for handling sensitive government data. The contractor is responsible for integrating these controls into existing systems, conducting regular assessments, and maintaining documentation to demonstrate adherence throughout the contract period. In addition to control implementation, the contract requires prompt detection, reporting, and response to any cyber incidents involving Covered Defense Information, in accordance with DFARS reporting timelines and procedures. This includes identifying potential breaches, escalating incidents to the appropriate authorities, and preserving forensic evidence for investigations. The work supports the Defense Logistics Agency under the Department of Defense and falls under NAICS code 541512, indicating it is a subcontract focused on computer systems design and related services. The contractor must ensure all activities are performed in compliance with federal standards, with no designated set-aside or geographic restrictions specified for performance.