Cybersecurity & CUI Compliance Support

This contract supports the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information, ensuring compliance with federal cybersecurity requirements for controlled unclassified information. It includes active cyber incident reporting through the Defense Industrial Base Cybersecurity and Infrastructure Protection Network, requiring timely and accurate submission of incident data in accordance with established protocols. Additionally, the contractor is responsible for the preservation of forensic data to support investigations and compliance audits, maintaining the integrity and availability of digital evidence related to security events. The work is performed as a subcontract under the Defense Logistics Agency, part of the Department of Defense, and is classified under NAICS code 541512 for computer systems design services. Performance is expected to align with DoD cybersecurity standards, with emphasis on continuous monitoring, response readiness, and data retention procedures. The contract does not specify a set-aside type or geographic limitations, and the place of performance is not defined, allowing for flexibility in execution while maintaining strict adherence to federal compliance mandates.