Cybersecurity and IT Compliance (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls to meet the requirements of DFARS 252.204-7012, ensuring that covered defense information is protected across all systems handling such data. This includes establishing robust administrative, technical, and physical safeguards, as well as prompt reporting of any cybersecurity incidents that compromise the confidentiality, integrity, or availability of controlled unclassified information. The contractor is responsible for ensuring these same security obligations are flowed down to all subcontractors, creating a chain of accountability throughout the supply chain. Compliance must be sustained throughout the contract lifecycle with continuous monitoring, documentation, and reporting to demonstrate adherence to federal cybersecurity standards. This subcontract falls under the NAICS code 541512 for computer systems design services and is issued by the Defense Logistics Agency under the Department of Defense. While specific performance locations and points of contact are not provided, the work is tied to Defense Department systems and requires strict alignment with federal regulations governing protected information. The contract is active with a posted date in 2026 and is linked to a specific award record, indicating it is part of an ongoing procurement effort to enhance cybersecurity posture across defense-supported IT environments. Failure to comply with NIST controls or incident reporting obligations may result in contract termination, financial penalties, or loss of eligibility for future DoD work.