Cybersecurity Compliance and CUI Safeguarding (Subcontractor Flow-Down)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 controls to safeguard Controlled Unclassified Information related to fuel logistics and contract operations. This includes ensuring all required security measures are in place to protect CUI from unauthorized access, disclosure, or compromise, with strict adherence to federal cybersecurity standards. The subcontractor must establish and sustain a compliant environment that aligns with Department of Defense requirements, covering systems, processes, and personnel handling sensitive information. In addition to control implementation, the contract mandates timely and accurate reporting of any cyber incidents affecting CUI, ensuring prompt response and remediation in accordance with federal regulations. All activities must be performed under the broader authority of the Defense Logistics Agency, with the work tied to the SPE60526D8509 contract and flowing down to this subcontract. The NAICS code 541512 indicates the work falls within information technology services, specifically computer systems design, and the subcontract is structured to ensure full compliance with federal cybersecurity obligations across all levels of performance.