Cybersecurity & Data Protection Subcontract (IT/Compliance Support)

This subcontract delivers comprehensive cybersecurity support to ensure compliance with NIST SP 800-171 requirements for the protection of covered defense information, including the implementation, ongoing monitoring, and enforcement of all applicable security controls. The contractor is responsible for establishing and maintaining systems and processes that meet the technical and administrative standards outlined in NIST guidelines, while also ensuring timely reporting of any cyber incidents in alignment with DFARS 252.204-7012 obligations. The work includes continuous assessment of security posture, response to potential threats, and documentation to demonstrate adherence to federal cybersecurity mandates for defense-related data. The subcontract is tied to the Defense Logistics Agency under the Department of Defense and falls under NAICS code 541512, indicating it involves computer systems design and related services. Performance is expected to occur in support of federal defense operations, though the exact location is not specified. The contractual obligations center on safeguarding sensitive information from unauthorized access, ensuring regulatory compliance, and maintaining the integrity of systems handling controlled unclassified information. The subcontractor must operate with strict accountability to meet all reporting and control requirements without deviation, and failure to comply could result in contract penalties or termination.