Cybersecurity and CUI Safeguarding

This contract requires subcontractors to implement all NIST SP 800-171 security controls to safeguard Controlled Unclassified Information (CUI) processed, stored, or transmitted on their systems. Compliance with DFARS 252.204-7012 is mandatory, ensuring that subcontractors establish and maintain appropriate cybersecurity measures consistent with Department of Defense standards. The subcontractor must demonstrate the ability to protect CUI through technical, administrative, and physical safeguards, and be prepared to undergo assessments or audits to verify adherence. Failure to comply may result in contractual penalties or termination. The work is performed under the Defense Logistics Agency, part of the Department of Defense, and falls under the NAICS code 541512 for computer systems design services, indicating the scope involves cybersecurity implementation and support as part of broader IT or system integration efforts.