Cybersecurity Compliance and CDI Safeguarding (IT Support)

This contract requires full compliance with DFARS 252.204-7012 to ensure the protection of Covered Defense Information handled under the scope of IT support services. The contractor must implement robust cybersecurity measures to safeguard sensitive data, adhering to the minimum security requirements outlined in the regulation, including access controls, system integrity checks, and continuous monitoring. Any cybersecurity incident affecting Covered Defense Information must be reported promptly to the Department of Defense, with complete documentation and preserved media maintained for forensic analysis and regulatory review. The subcontract falls under NAICS code 541512 and is administered by the Defense Logistics Agency, part of the Department of Defense, with performance obligations tied to the terms of the parent contract SPE7LX21D0081 and delivery order SPE7LX26FB2C0. Compliance is mandatory and non-negotiable, with failure to meet requirements potentially resulting in contract termination or penalties.