Cybersecurity & IT Compliance Support

The contract requires the implementation and ongoing maintenance of NIST Special Publication 800-171 security controls to ensure full compliance with DFARS clause 252.204-7012 for the protection of covered defense information associated with test data and invoicing systems. This subcontract is focused on establishing a robust cybersecurity framework that safeguards sensitive defense-related data throughout its lifecycle, with emphasis on access control, audit and accountability, configuration management, identification and authentication, and incident response. The work is performed under the authority of the Defense Logistics Agency, a component of the Department of Defense, and is tied to the NAICS code 541512 for computer systems design services, indicating a technical services engagement. Compliance is non-negotiable and must be continuously monitored and documented to meet federal defense contracting requirements. The contractor is responsible for aligning all IT systems and operational processes with NIST 800-171 controls, conducting regular assessments, remediating vulnerabilities, and providing evidence of compliance upon request. The performance location and point of contact details are not specified, indicating the work may be conducted remotely or across multiple sites, but the obligation to secure covered defense information remains absolute. The contract is active under award number SPE60324FA4C0 and was posted in July 2026 as a subcontract within the broader DLA contracting structure.