Cybersecurity & CUI Compliance Support

The contract encompasses the implementation of NIST SP 800-171 security controls to protect Controlled Unclassified Information in accordance with DFARS 252.204-7012, ensuring compliance with Department of Defense cybersecurity requirements. It requires full coverage of CUI safeguarding measures, including access controls, audit and accountability, configuration management, and incident response protocols, all tailored to the subcontractor’s scope of work. Cyber incident response procedures must be established and maintained to detect, report, and remediate breaches involving CUI within the mandated timeframes, with documented evidence of compliance to be submitted upon request. This engagement is structured as a subcontract under the Defense Logistics Agency, falling under NAICS code 541512 for computer systems design services, and is tied to contract SPE60524D4502 with delivery order SPE60526FHST2. The work is performance-based and requires continuous adherence to federal cybersecurity standards without deviation, with the contractor responsible for maintaining an ongoing compliance posture throughout the contract lifecycle. All activities must align with DoD expectations for third-party handlers of sensitive government information, and failure to meet these obligations may result in contract termination or penalties.