Cybersecurity Compliance & CUI Safeguarding (IT Security Support)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Covered Defense Information and ensure full compliance with DFARS 252.204-7012. This includes establishing robust cybersecurity measures to protect CUI throughout its lifecycle, from storage and processing to transmission, and ensuring all systems and personnel adhere to the required federal standards. The contractor must maintain continuous compliance through regular assessments, documentation, and remediation of any gaps in control implementation. In addition to securing CUI, the contract mandates a 72-hour reporting obligation for any cyber incidents that affect the confidentiality, integrity, or availability of CUI. The contractor is responsible for detecting, responding to, and promptly reporting such incidents to the appropriate government authorities within the required timeframe. This work is performed under a subcontract tied to the Defense Logistics Agency within the Department of Defense, classified under NAICS code 541512 for computer systems design services, with performance expected to align with federal cybersecurity mandates regardless of geographic location.