Cybersecurity Compliance & CUI Safeguarding

The contract requires implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information across all systems and processes. Compliance with DFARS 252.204-7012 is mandatory, ensuring that subcontractors meet Department of Defense requirements for protecting CUI and reporting cybersecurity incidents. The contractor must establish robust incident response capabilities to detect, respond to, and report any breaches or anomalies involving CUI in accordance with federal standards. Additionally, continuous monitoring and accurate reporting through the Supplier Performance Risk System are required to demonstrate ongoing compliance and security posture to the Defense Logistics Agency. This subcontract falls under NAICS code 541512 for computer systems design services and is managed under the Department of Defense. The place of performance and specific office details are not provided, but the work is expected to be performed in alignment with DLA expectations for secure information handling. The contract emphasizes sustained adherence to federal cybersecurity frameworks without reliance on set-asides or specific small business designations. All activities must support DLA’s mission to ensure the integrity, confidentiality, and availability of sensitive defense information throughout the supply chain.