Cybersecurity & Supply Chain Risk Compliance Monitoring

This contract requires comprehensive compliance with federal cybersecurity regulations including DFARS 252.204-7009 and FAR 52.204-30, with a focus on safeguarding controlled unclassified information and ensuring timely incident reporting obligations are met. The work entails continuous monitoring of cybersecurity controls across the supply chain, conducting third-party risk assessments, and verifying adherence to established protocols for protecting sensitive defense information. All activities must align with Department of Defense standards for cyber resilience and data integrity within subcontractor environments. The subcontract is managed under the Defense Logistics Agency and falls under the NAICS code 541512 for computer systems design services. Performance is expected to occur within the broader scope of Department of Defense operations, though no specific location is designated. The contract was posted on July 14, 2026, and is structured to ensure that all entities handling controlled unclassified information maintain robust security practices and can demonstrate compliance through auditable processes and assessments.