Cybersecurity and CUI Compliance Support

The contract requires full implementation and ongoing maintenance of DFARS 252.204-7012 compliance to protect covered defense information, aligning all systems and processes with the cybersecurity requirements outlined in NIST SP 800-171. This includes establishing and enforcing technical, administrative, and physical safeguards to ensure the confidentiality, integrity, and availability of controlled unclassified information handled within the scope of the subcontract. All cybersecurity controls must be documented, continuously monitored, and adjusted as necessary to maintain compliance throughout the contract lifecycle. In addition to safeguarding measures, the contract mandates prompt and accurate reporting of any cyber incidents that impact covered defense information, adhering to the strict timelines and procedural requirements set forth by the Department of Defense. The subcontractor is responsible for maintaining audit-ready records, conducting internal assessments, and coordinating with the Defense Logistics Agency to ensure all obligations are met under the broader DOD cybersecurity framework. Work is performed under the North American Industry Classification System code 541512, indicating information technology and related services, with compliance expected across all operational environments supporting the contract's defense mission.