Cybersecurity Compliance and CUI Safeguarding for Subcontractors

The contract requires comprehensive cybersecurity support to ensure subcontractors handling Controlled Unclassified Information meet NIST SP 800-171 compliance standards. This includes implementing and maintaining safeguarding measures for CUI, conducting assessments to verify adherence to required security controls, and providing ongoing guidance to subcontractors to address gaps or evolving requirements. The scope also mandates immediate cyber incident reporting in accordance with federal guidelines, ensuring timely notification and response to any breaches or suspicious activity involving CUI. Additionally, the contract demands proper media preservation practices to maintain the integrity, availability, and authenticity of all digital and physical media containing CUI throughout its lifecycle. This involves secure handling, documentation, storage, and retention procedures aligned with federal standards to prevent loss, tampering, or unauthorized access. The work is performed under the Department of Defense through the Defense Logistics Agency, with performance obligations tied to the protection of sensitive defense-related information across the supply chain.