Cybersecurity Compliance & Covered Defense Information Safeguarding

This contract requires the implementation of NIST Special Publication 800-171 security controls to safeguard covered defense information and ensure full compliance with DFARS clause 252.204-7012. The work involves establishing, maintaining, and auditing a robust cybersecurity framework that meets federal standards for protecting sensitive data transmitted or stored within subcontractor systems. All aspects of the NIST controls must be applied comprehensively, including access management, incident detection, media protection, and system monitoring, with documented policies and procedures to support ongoing compliance. The contractor is obligated to report any cybersecurity incidents involving covered defense information promptly and in accordance with DFARS requirements, ensuring timely notification and full cooperation during investigations. This subcontract is issued under the Department of Defense, specifically by the Defense Logistics Agency, and falls under NAICS code 541512 for computer systems design services. The scope focuses on technical and procedural alignment with DoD cybersecurity mandates, emphasizing continuous protection of unclassified controlled technical information wherever it is processed, stored, or transmitted.