Cybersecurity & Supply Chain Risk Mitigation

This contract requires strict adherence to cybersecurity standards for the protection of covered defense information, mandating implementation of NIST SP 800-171 controls to safeguard sensitive data throughout the supply chain. All parties must comply with DFARS clauses that prohibit the use of covered telecommunications equipment and services from entities identified as national security risks, ensuring that no prohibited hardware or software is integrated into systems or operations. The subcontract is subject to continuous monitoring and verification to maintain compliance, with violations potentially leading to termination or penalties. The work is performed under the authority of the Defense Logistics Agency, a component of the Department of Defense, and falls under NAICS code 541512 for computer systems design services. The contract spans the entirety of the defense supply chain, requiring subcontractors and vendors to demonstrate robust cybersecurity postures and supply chain risk mitigation practices. Performance obligations extend to all locations where covered information is handled, stored, or processed, and compliance must be documented and verifiable at all stages of contract execution.