Cybersecurity Compliance & Incident Reporting

The contract entails the implementation and ongoing maintenance of NIST SP 800-171 security controls across systems that process, store, or transmit Covered Defense Information, ensuring alignment with federal cybersecurity standards for defense contractors. This includes establishing technical, administrative, and physical safeguards to protect sensitive data, as well as continuous monitoring and mitigation of vulnerabilities to maintain compliance. The scope demands strict adherence to reporting protocols for cybersecurity incidents, requiring timely notification and detailed documentation of breaches or anomalies to the appropriate defense authorities. In addition to preventative measures, the contract requires comprehensive forensic support to investigate security events, preserve digital evidence, and support attribution or remediation efforts. This involves coordinating with internal and external cybersecurity teams to conduct root cause analyses, prepare forensic reports, and assist in response activities to minimize operational impact and regulatory exposure. The work is performed under a subcontract through the Defense Logistics Agency, governed by NAICS code 541512, and is expected to be conducted in support of Department of Defense operations, with all activities geared toward sustaining the integrity and confidentiality of defense-related information systems.