Cybersecurity Compliance and CDI Safeguarding

The contract requires full implementation and ongoing maintenance of cybersecurity controls outlined in NIST Special Publication 800-171 to ensure the protection of Covered Defense Information. This includes establishing and sustaining technical, administrative, and physical safeguards that meet federal standards for safeguarding sensitive unclassified information within the defense industrial base. Compliance with these controls is mandatory and must be continuously monitored to address evolving threats and maintain audit readiness. The contractor is also obligated to report any cybersecurity incidents involving Covered Defense Information through the Defense Industrial Base Cybersecurity and Incident Reporting Portal, known as DIBNet. Timely and accurate incident reporting is critical to support Department of Defense threat awareness and response efforts. The work is performed under a subcontract tied to the Defense Logistics Agency, with the NAICS code 541512 indicating it relates to computer systems design services, and the agreement remains active under the broader oversight of the Department of Defense.