Cybersecurity and CUI Compliance Support

This contract provides comprehensive cybersecurity support to subcontractors handling covered defense information, with a primary focus on ensuring compliance with NIST SP 800-171 requirements. The scope includes implementing the necessary technical and administrative safeguards to protect controlled unclassified information, conducting regular assessments of security controls, and establishing processes for continuous monitoring and improvement of cybersecurity posture. Subcontractors must also be supported in meeting mandatory cyber incident reporting obligations, including timely notification and documentation of any security breaches involving covered defense information. Additionally, the contract encompasses media preservation functions to ensure the secure handling, retention, and disposal of digital and physical media containing sensitive data, aligning with federal standards for information lifecycle management. All activities are performed under the authority of the Department of Defense through the Defense Logistics Agency, with services tailored to meet the unique compliance needs of subcontractors across the defense supply chain.