Cybersecurity and CUI Protection

The contract mandates the full implementation of NIST Special Publication 800-171 controls to protect covered defense information and ensure compliance with federal cybersecurity standards for handling controlled unclassified information. This subcontract requires robust technical and procedural measures to secure information systems, enforce access controls, enable audit logging, and maintain continuous monitoring to prevent unauthorized access or data exfiltration. All activities must align with Department of Defense requirements, focusing on safeguarding sensitive defense data throughout its lifecycle. Additionally, the contractor is obligated to establish and maintain a cyber incident reporting capability that enables rapid detection, response, and notification of any security breaches or anomalies involving covered defense information. Reporting protocols must meet specified timelines and formats to ensure timely escalation to appropriate defense authorities. The work is performed under a NAICS code for computer systems design services and is issued by the Defense Logistics Agency within the Department of Defense, with performance tied to the broader national defense information infrastructure.