Cybersecurity & IT Compliance Support (CUI Safeguarding)

The contract encompasses the implementation and ongoing maintenance of NIST SP 800-171 controls to safeguard controlled unclassified information across all contractor and subcontractor systems, ensuring alignment with Department of Defense cybersecurity requirements. It mandates full compliance with DFARS 252.204-7012, requiring robust security measures for handling, storing, and transmitting CUI, as well as timely cyber incident reporting in accordance with established federal protocols. The scope extends to all tiers of the supply chain, obligating subcontractors to adhere to the same standards as the prime contractor, creating a unified and auditable security posture throughout the network. Supported under the Defense Logistics Agency as part of the broader Department of Defense initiative, this subcontract is classified under NAICS code 541512, indicating specialized information technology and cybersecurity services. Performance obligations are tied to securing systems that process or store CUI regardless of geographic location, with no specific place of performance designated, implying distributed operations across multiple sites. The contract requires continuous monitoring, documentation, and reporting to maintain compliance, with penalties for noncompliance or delayed incident notifications, ensuring accountability and resilience in the defense supply chain’s cyber infrastructure.