Cybersecurity and CUI Compliance Support

The contract provides comprehensive cybersecurity support to ensure full compliance with DFARS 252.204-7012, focusing on the protection of Controlled Unclassified Information within the defense supply chain. It requires strict alignment with NIST Special Publication 800-171 standards for safeguarding CUI, including the implementation of security controls across systems, networks, and personnel practices. This includes establishing policies and procedures for access control, audit and accountability, configuration management, incident response, and continuous monitoring to meet federal cybersecurity requirements. The subcontract mandates timely and accurate cyber incident reporting in accordance with DFARS regulations, ensuring any breaches or suspected compromises of CUI are identified, contained, and reported to the appropriate authorities within designated timeframes. The work is performed under the oversight of the Defense Logistics Agency, a division of the Department of Defense, and is classified under NAICS code 541512 for computer systems design services. The contract is structured as a subcontract with no set-aside designation and is tied to the award number SPE4A626PX842, with performance expected wherever the subcontractor’s operations support covered defense systems or data environments.