Cybersecurity & CUI Compliance Support (Subcontractor Flow-Down)

This subcontract supports the prime contractor in fulfilling Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012 requirements for the protection of Controlled Unclassified Information (CUI) across its operations. The scope includes the implementation of the National Institute of Standards and Technology Special Publication 800-171 security controls to ensure proper safeguarding of CUI, covering areas such as access control, audit and accountability, configuration management, and incident response. The subcontractor is tasked with providing expert guidance and operational support to align systems, policies, and personnel practices with these stringent cybersecurity standards, ensuring full compliance throughout the contract lifecycle. In addition to technical implementation, the subcontractor is responsible for assisting with the timely and accurate reporting of cybersecurity incidents involving CUI as mandated by DFARS, including coordination with federal authorities and documentation of breach responses. The work is performed under the auspices of the Defense Logistics Agency, a component of the Department of Defense, and falls under NAICS code 541512 for computer systems design services. While the place of performance details are unspecified, the deliverables must meet federal compliance timelines and standards, with all activities designed to ensure the prime contractor remains in good standing under its own contractual obligations to protect sensitive defense information.