Cybersecurity & CUI Safeguarding (Non-Development)

The contract requires the implementation of NIST SP 800-171 safeguards to protect covered defense information handled during order and delivery processing, ensuring all systems meet federal cybersecurity standards for controlled unclassified information. This includes establishing technical, administrative, and physical controls to secure data environments, detect potential threats, and maintain continuous compliance throughout the lifecycle of the subcontracted activities. The work is non-development in nature and centers strictly on safeguarding existing systems and processes that handle sensitive defense information. In addition to safeguarding, the contractor must establish and maintain a cyber incident reporting capability aligned with federal requirements, ensuring timely detection, containment, and notification of any security breaches or anomalies. The subcontract falls under the Department of Defense, specifically the Defense Logistics Agency, with a NAICS code of 541512 indicating it involves computer systems design and related services. The implementation must follow standardized federal protocols without modification, and the performance location is not specified, suggesting potential nationwide or multi-site execution. Compliance readiness and auditability are essential throughout the contract period.