Cybersecurity Compliance & Data Safeguarding (IT/Compliance Subcontract)

This subcontract requires the implementation and ongoing maintenance of cybersecurity controls as specified in NIST SP 800-171 to protect covered defense information within fuel logistics operations. The scope includes ensuring compliance with all applicable security requirements related to access control, audit and accountability, configuration management, identification and authentication, incident response, media protection, risk assessment, and system and communications protection. The contractor must establish and manage processes for the timely reporting of cyber incidents in accordance with federal regulations and preserve all relevant digital media for evidentiary and investigative purposes. Compliance must be sustained throughout the contract term with continuous monitoring, documentation, and readiness for internal and external assessments. The work is performed under the Department of Defense’s Defense Logistics Agency and falls under NAICS code 541512 for computer systems design services. The subcontract is part of a broader defense contract, with performance tied to securing sensitive operational data involved in fuel supply chains. Though specific location details are not provided, the activities are mission-critical and require strict adherence to federal cybersecurity standards. All tasks must be executed with precision to meet contractual obligations, support national defense infrastructure, and ensure uninterrupted logistics operations through robust data safeguarding practices.