Cybersecurity and CUI Compliance Support

The contract entails providing comprehensive administrative and technical support to ensure adherence to DFARS 252.204-7012 requirements, focusing on the implementation of all NIST SP 800-171 security controls to protect Controlled Unclassified Information. This includes establishing, maintaining, and auditing systems and processes that meet federal cybersecurity standards for defense subcontractors. The contractor is responsible for promptly reporting any cyber incidents through the DIBNET portal, ensuring timely communication and coordination with federal authorities as mandated by regulation. In addition to incident response, the contract requires the preservation of all relevant digital media for a minimum of 90 days following any reported cybersecurity event to support forensic analysis and regulatory investigations. All activities must align with the Defense Logistics Agency’s expectations under the Department of Defense, operating under the NAICS code 541512 for computer systems design services. The work is structured as a subcontract and is positioned to maintain compliance across the defense industrial base, with strict adherence to timelines, documentation, and security protocols governing CUI handling and cyber incident management.