Cybersecurity Compliance and Incident Reporting

The Cybersecurity Compliance and Incident Reporting subcontract, issued by the Defense Logistics Agency under the Department of Defense, focuses on the implementation of NIST SP 800-171 controls. The primary objectives include the development of a System Security Plan and a Plan of Action and Milestones to ensure rigorous security standards are met. A critical requirement of this agreement is the mandatory reporting of cybersecurity incidents within 72 hours of discovery. Additionally, the contractor is responsible for flowing down these compliance requirements to all applicable subcontractors to maintain security integrity across the supply chain.