Cybersecurity Compliance & CUI Protection (Sub-tier Support)

The contract requires the provision of cybersecurity advisory and managed services focused on achieving and maintaining compliance with DFARS 252.204-7012, specifically through the full implementation of NIST SP 800-171 controls to safeguard controlled unclassified information within nonfederal systems. The contractor must deliver ongoing support to ensure that security requirements are met, monitored, and continuously improved, with a strong emphasis on protecting CUI from unauthorized access, disclosure, or compromise. This includes establishing robust policies, conducting risk assessments, configuring technical safeguards, and training personnel to align with federal cybersecurity standards. In addition to implementation and compliance support, the contractor is responsible for promptly identifying, reporting, and documenting cyber incidents affecting covered defense information in accordance with the prescribed procedures established by the Defense Cyber Crime Center. All incident responses must be executed in alignment with federal guidelines to ensure timely and accurate reporting to DC3. The work is performed as a subcontract under the Defense Logistics Agency, classified under NAICS code 541512 for computer systems design services, and is expected to involve continuous engagement to maintain operational readiness and regulatory adherence throughout the contract lifecycle.