Cybersecurity Compliance and CDI Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect Covered Defense Information and ensure full compliance with DFARS 252.204-7012. This includes establishing robust cybersecurity measures across systems and processes that handle sensitive defense data, with strict adherence to access controls, audit logging, configuration management, and incident response protocols. All activities must be conducted to meet federal requirements for safeguarding controlled unclassified information within the defense industrial base. The subcontractor is obligated to promptly report any cybersecurity incidents involving Covered Defense Information in accordance with DFARS reporting timelines and procedures. The work is performed under the auspices of the Defense Logistics Agency, a component of the Department of Defense, and falls under the NAICS code 541512 for computer systems design services. Performance is expected to align with federal cybersecurity standards regardless of physical location, and compliance is mandatory to fulfill contractual obligations and support national defense priorities.