Cybersecurity & CUI Compliance Support

The contract requires comprehensive support for implementing and maintaining NIST SP 800-171 cybersecurity controls to protect Controlled Unclassified Information within systems handling Department of Defense data. It mandates active monitoring, compliance validation, and continuous alignment with the specified security framework to ensure all requirements are met and sustained over time. Additionally, the contractor must establish and manage processes for reporting cyber incidents through designated Department of Defense portals, ensuring timely, accurate, and complete submission of incident data in accordance with federal and DoD guidelines. The contractor is also responsible for flowing down all applicable NIST SP 800-171 requirements and cybersecurity obligations to any subcontractors or third parties involved in the project, ensuring consistent compliance across the entire supply chain. This includes verifying subcontractor adherence through audits, documentation reviews, and contractual enforcement. The work is performed under a subcontract to the Defense Logistics Agency, classified under NAICS code 541512 for computer systems design services, and must remain fully aligned with federal cybersecurity standards throughout the performance period.