Cybersecurity and CUI Compliance Support

The contract supports compliance with NIST SP 800-171 standards, implementation of CMMC Level 2 requirements, and cyber incident reporting obligations under DFARS regulations. It is focused on assisting organizations in establishing, maintaining, and validating robust cybersecurity controls to protect controlled unclassified information within the Department of Defense supply chain. The scope includes assessment, gaps analysis, policy development, employee training, system hardening, continuous monitoring, and documentation required to achieve and sustain compliance. This subcontract is issued under the Defense Logistics Agency, which operates under the Department of Defense, and falls under the NAICS code for computer systems design and related services. The work is expected to be performed in alignment with federal cybersecurity frameworks and may involve on-site or remote support depending on contractor capabilities. The contract aims to strengthen the cybersecurity posture of defense contractors by ensuring adherence to mandatory security controls and timely reporting of cyber incidents as stipulated by defense acquisition regulations.