Cybersecurity Compliance & CDI Safeguarding

The contract requires full implementation of NIST SP 800-171 security controls to safeguard Covered Defense Information, ensuring that all applicable cybersecurity measures are integrated into systems and processes. This includes conducting a self-assessment to validate compliance with the specified controls and maintaining ongoing adherence to the standards. Any cyber incident affecting the confidentiality, integrity, or availability of Covered Defense Information must be reported to the Department of Defense within 72 hours of discovery, and all identified malicious software must be submitted through the DIBNet portal. The subcontract is governed under the Defense Logistics Agency and falls under NAICS code 541512, emphasizing its focus on computer systems design and related services for defense applications. Compliance is mandatory and forms a critical component of the contractor's obligations under the agreement.