Cybersecurity and IT Compliance Support for Subcontractors

The contract requires comprehensive cybersecurity compliance support for subcontractors who handle controlled unclassified information, with a primary focus on implementing the NIST SP 800-171 security requirements to ensure proper protection of sensitive data. This includes assisting subcontractors in aligning their information systems and processes with the specific controls outlined in the NIST framework, conducting assessments to verify compliance, and providing guidance on remediation of identified gaps. The contractor will also be responsible for establishing and maintaining procedures for timely cyber incident reporting in accordance with federal requirements, ensuring that any security breaches or anomalies are promptly identified, documented, and escalated to the appropriate authorities. Support under this contract extends to fostering a culture of cybersecurity awareness among subcontractors, delivering training and documentation resources, and facilitating ongoing monitoring and audit readiness activities. The work is tied to the Defense Logistics Agency under the Department of Defense and is categorized under NAICS code 541512, reflecting its alignment with computer systems design and related services. Performance is expected to support the broader DOD mission of securing the supply chain against cyber threats, with emphasis on consistent adherence to federal standards across all levels of subcontracted operations.