Cybersecurity Compliance and CDI Safeguarding

The contract requires full implementation and ongoing maintenance of the cybersecurity controls outlined in NIST Special Publication 800-171 Revision 2 to ensure the protection of Covered Defense Information. This includes establishing, validating, and sustaining all required security measures across systems and processes that handle such information, with a focus on preventing unauthorized access, disclosure, or loss. Continuous compliance is mandatory, and any security incident involving Covered Defense Information must be reported promptly through the Defense Industrial Base Cybersecurity and Availability Reporting Network, commonly known as DIBNet, in accordance with federal defense contract obligations. The contractor is operating under a subcontract tied to the Department of Defense, specifically under the Defense Logistics Agency, and must adhere to the cybersecurity standards set forth for defense contractors handling sensitive unclassified information. The work is governed by the NAICS code 541512, indicating it involves computer systems design and related services. Although specific geographic performance locations are not detailed, the requirement applies wherever Covered Defense Information is processed, stored, or transmitted, necessitating a robust, enterprise-wide cybersecurity posture aligned with federal defense directives.