Cybersecurity Compliance & CDI Management

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls across all systems that handle Covered Defense Information, ensuring alignment with federal cybersecurity standards for protecting sensitive data. The work includes establishing technical and administrative safeguards to meet compliance requirements, as well as maintaining continuous monitoring and reporting procedures to address vulnerabilities and enforce control effectiveness. Cyber incident reporting must be conducted promptly and in accordance with defined protocols to support timely response and remediation efforts. The contractor is also responsible for overseeing subcontractor compliance, ensuring that all downstream entities handling Covered Defense Information adhere to the same NIST 800-171 requirements. This involves validating subcontractor security practices, conducting assessments, and enforcing contractual obligations related to data protection and incident reporting. The subcontract is awarded under the Defense Logistics Agency within the Department of Defense and falls under NAICS code 541350, indicating services related to computer systems design and integrated systems design, with performance expected to support secure information handling across the defense supply chain.