Cybersecurity Compliance and CDI Safeguarding

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to safeguard covered defense information throughout all manufacturing and data handling operations. This includes ensuring that all systems, networks, and processes handling sensitive defense data adhere strictly to the specified security requirements, covering areas such as access control, awareness and training, audit and accountability, configuration management, and incident response. Compliance is mandatory and must be continuously monitored to mitigate risks and maintain the integrity of defense-related information. The contractor is obligated to promptly report any cybersecurity incidents that may impact covered defense information, following defined procedures to ensure timely escalation and remediation. The work is performed as a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, and falls under the NAICS code 541330 for other scientific and technical consulting services. There is no specific geographic location designated for performance, and the contract is not subject to any set-aside provisions, meaning it is open to all eligible subcontractors regardless of business size or status.