Cybersecurity & CUI Compliance Support

The contract requires full compliance with DFARS 252.204-7012, mandating the implementation of robust cybersecurity measures to safeguard Covered Defense Information and ensure adherence to federal standards for protecting controlled unclassified information. This includes establishing appropriate access controls, system monitoring, and security configurations to mitigate risks and prevent unauthorized disclosure, as well as maintaining an incident response capability to promptly detect and report cyber incidents affecting covered systems. All parties must preserve forensic data related to cyber incidents for a minimum of nine years and provide it to the government upon request to support investigations and remediation efforts. This subcontract, awarded under the Department of Defense’s Defense Logistics Agency, is classified under NAICS code 541512 for computer systems design services and applies to work supporting defense-related cybersecurity infrastructure. The contract obligates the contractor to maintain continuous compliance with the required security controls and reporting protocols, ensuring alignment with DoD cybersecurity mandates. Performance is expected to be conducted in support of DoD operations without geographic restriction, and the contractor must be prepared to respond to incident notifications and audits at any time during the contract period.