Cybersecurity Compliance & Incident Reporting

The contract requires full implementation and ongoing maintenance of NIST Special Publication 800-171 security controls to safeguard covered defense information, ensuring compliance with federal cybersecurity standards for contractors handling sensitive DoD data. This includes rigorous adherence to access control, audit, configuration management, and incident response protocols as outlined in the framework. Immediate cyber incident reporting is mandated through DIBNet within 72 hours of discovery, with strict requirements to preserve complete system images for forensic analysis and government investigation. The work is performed under a subcontract tied to the Defense Logistics Agency and falls under NAICS code 541512 for computer systems design services, reflecting the technical nature of the compliance and support activities. All activities must be conducted in accordance with DoD requirements and are subject to oversight tied to the contract’s performance location, though specific geographic details are not provided.