Cybersecurity Compliance & CUI Protection (Subcontract Flowdown)

This subcontract focuses on ensuring compliance with NIST SP 800-171 and DFARS 252.204-7012 requirements, specifically addressing the protection of Controlled Unclassified Information within systems handling Department of Defense data. The work entails implementing robust security controls, developing and maintaining comprehensive system security plans, and establishing processes to safeguard CUI throughout its lifecycle, from storage and transmission to disposal. The subcontractor is responsible for aligning all cybersecurity practices with federal standards to meet the stringent requirements of the Defense Logistics Agency under the Department of Defense. Performance of these activities is tied to the contractual obligation to uphold CUI protection standards across all relevant systems and environments, with adherence to NIST guidelines as the baseline for security configuration, access control, audit logging, and incident response. The subcontract is classified under NAICS code 541512 for computer systems design services and is flowed down from a larger DLA contract, meaning the subcontractor must fully integrate these cybersecurity obligations into their operational and technical frameworks without deviation. The work is ongoing and subject to continuous monitoring and documentation to ensure sustained compliance.