Cybersecurity & Data Management for Subcontractors

The contract requires the implementation and ongoing maintenance of cybersecurity systems fully compliant with NIST SP 800-171 for subcontractors handling sensitive operational data including delivery records, invoices, and cyber incident reports transmitted over DIBNET. This effort ensures that all third-party entities involved in supporting Defense Logistics Agency operations meet stringent federal requirements for protecting controlled unclassified information. The scope encompasses system design, configuration, monitoring, and continuous compliance enforcement to safeguard data integrity, confidentiality, and availability throughout the supply chain. All subcontractors must adhere to the technical and procedural standards outlined in NIST SP 800-171 without exception, and the contractor is responsible for verifying, documenting, and sustaining compliance across the entire network of entities accessing DIBNET for data exchange. The work is classified as a subcontract under NAICS code 541512, indicating it pertains to custom computer programming services specifically tailored to meet defense-related cybersecurity mandates. Performance is tied to the Defense Logistics Agency’s broader objective of securing its industrial base against evolving cyber threats, with no geographic restrictions defined but with strict requirements for data handling within the DIBNET environment.