Cybersecurity and DFARS Compliance Support

The contract requires the implementation and ongoing maintenance of cybersecurity controls to meet the requirements of DFARS 252.204-7012, which mandates adherence to NIST SP 800-171 standards for protecting controlled unclassified information on nonfederal systems. This includes establishing robust access controls, configuration management, incident response procedures, and continuous monitoring to ensure the confidentiality, integrity, and availability of sensitive data. The contractor must also conduct regular system assessments to validate compliance and promptly report any cybersecurity incidents to the Department of Defense as required by regulation. This subcontract is issued under the Defense Logistics Agency, part of the Department of Defense, and is classified under NAICS code 541512 for computer systems design services. The work is performance-based and must be executed in alignment with federal cybersecurity guidelines, with no specific location designated for performance. The contractor is expected to provide sustained support to maintain compliance, demonstrate audit readiness, and respond to evolving threats through updated controls and documented procedures. The contract remains active under the DIBBS platform with reference number SPE7LX22D0068.