Cybersecurity and CUI Safeguarding

The contractor is required to implement and maintain all NIST SP 800-171 security controls to safeguard Covered Defense Information and ensure compliance with DFARS 252.204-7012. This includes establishing, maintaining, and continuously monitoring a security environment that protects sensitive unclassified information related to defense contracts. The contractor must promptly report any cyber incidents affecting CDI to the Department of Defense within 72 hours of discovery, following specified reporting procedures and providing all required evidence and forensic data as part of the incident response. This subcontract falls under NAICS code 541512 for computer systems design services and is issued by the Defense Logistics Agency under the Department of Defense. The work is expected to be performed in support of defense operations, though the specific location of performance is not detailed. The contract is tied to the DIBBS system with the referenced award and delivery identification numbers, indicating it is part of a broader defense acquisition ecosystem requiring strict adherence to federal cybersecurity standards for handling controlled unclassified information.