Cybersecurity & CUI Compliance Support (WAWF/DFARS)

This contract requires support for safeguarding Controlled Unclassified Information (CUI) and ensuring full compliance with DFARS 252.204-7012 for subcontractors managing data through the Wide Area Workflow (WAWF) system. The work centers on implementing robust cybersecurity controls to protect CUI, establishing procedures for timely cyber incident reporting as mandated by federal regulations, and maintaining continuous alignment with the Department of Defense’s information security standards. Compliance efforts must address the full scope of requirements outlined in DFARS 252.204-7012, including access controls, audit trails, system and communications protection, and incident response protocols specific to handling sensitive defense logistics data. The subcontract falls under NAICS code 541512 for Computer Systems Design Services and is associated with the Defense Logistics Agency under the Department of Defense. Performance is tied to the handling of WAWF data, necessitating that all subcontractors involved adopt and enforce adequate cybersecurity measures as a condition of participation. While no physical location is specified for performance, the obligation to comply with federal cybersecurity mandates applies regardless of geographic location, and the subcontractor must demonstrate ongoing adherence to these requirements throughout the term of the agreement.