Cybersecurity & CUI Safeguarding (NIST SP 800-171)

The contract mandates full compliance with NIST Special Publication 800-171 to protect covered defense information by implementing required security controls for systems handling controlled unclassified information. It requires the development and maintenance of a System Security Plan that documents the implementation of NIST SP 800-171 requirements, ensuring all applicable safeguards are in place to prevent unauthorized access, disclosure, or loss of sensitive data. Cyber incident reporting must be performed in accordance with DFARS clauses, obligating prompt notification and cooperation with government authorities in the event of a security breach or compromise. This is a subcontract under the Department of Defense, administered by the Defense Logistics Agency, with the North American Industry Classification System code 541512 indicating it relates to computer systems design services. The obligation to adhere to federal cybersecurity standards is binding and foundational to contract performance, with failure to comply potentially resulting in contract termination or penalties. All activities involving the handling of covered defense information must occur in an environment that meets or exceeds the security baseline established by NIST SP 800-171, and ongoing monitoring, documentation, and reporting are required to maintain compliance throughout the contract lifecycle.