Cybersecurity Compliance and Incident Reporting

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls for information systems that process, store, or transmit Controlled Unclassified Information. This includes ensuring all technical, administrative, and physical safeguards defined in the standard are fully operational and continuously compliant. The contractor must establish and sustain a robust cybersecurity posture aligned with federal requirements, conducting regular assessments, updates, and documentation to validate adherence to the controls across all relevant systems. Additionally, the contractor is responsible for managing cyber incident reporting through the Defense Industrial Base Cybersecurity and Incident Reporting Portal, known as DIBNet. This involves promptly identifying, documenting, and reporting any security breaches or anomalies that affect CUI, adhering to strict timelines and procedural requirements set by the Department of Defense. The work is performed as a subcontract under the Defense Logistics Agency, with the North American Industry Classification System code 541512 indicating it falls under computer systems design and related services. The contract aims to ensure national security information remains protected and that all incident responses are accurately tracked and reported in accordance with DOD directives.