Cybersecurity Compliance and Incident Reporting

The contract requires full implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls to protect controlled unclassified information within the defense industrial base. It mandates the continuous capability to detect cyber incidents in real time and mandates strict reporting procedures through the Defense Industrial Base Cybersecurity Information Exchange, known as DIBNet, with all incidents required to be reported within a 72-hour window of detection. This subcontract is issued under the Department of Defense, specifically by the Defense Logistics Agency, and falls under the NAICS code 541512 for computer systems design services, indicating the focus on technical implementation and support. Compliance with these requirements is non-negotiable and forms the core obligation of the contract, ensuring alignment with federal cybersecurity standards for defense contractors.