Cybersecurity Compliance and Covered Defense Information Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information in compliance with DFARS 252.204-7012. This obligation applies to all systems handling or processing such information and demands rigorous adherence to specified cybersecurity practices, including access control, audit logging, configuration management, incident response, and data encryption. The contractor must establish and sustain a robust security posture that meets federal standards for protecting sensitive defense data, with continuous monitoring and documentation to demonstrate compliance. This subcontract is issued under the Defense Logistics Agency, part of the Department of Defense, and falls under the NAICS code 541512 for computer systems design services. Performance of the work is not tied to a specific geographic location but must be conducted in a manner that ensures the confidentiality, integrity, and availability of covered defense information across all relevant systems. The contract remains active under the terms of DFARS and requires the contractor to maintain compliance throughout its duration, with potential audit or assessment by government entities to validate adherence to NIST controls. Failure to meet these requirements may result in contract termination or loss of eligibility for future DoD work.