Cybersecurity and CUI Safeguarding Support

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to safeguard Covered Defense Information as mandated by DFARS 252.204-7012. This includes establishing robust protections for controlled unclassified information across all systems and networks, ensuring compliance through regular assessments and continuous monitoring. The contractor is responsible for enforcing access controls, system integrity, data encryption, audit logging, and personnel training to meet federal cybersecurity standards. Additionally, the contract mandates prompt incident reporting in the event of a security breach or compromise involving covered defense information, with strict timelines and procedures for notification and remediation. Audits, both internal and external, are required to verify adherence to NIST controls and DFARS requirements, with findings documented and corrective actions taken immediately. The work is performed under a subcontract linked to the Defense Logistics Agency under the Department of Defense, classified under NAICS code 541512 for computer systems design services, with performance obligations tied to federal defense cyber protection frameworks.