Cybersecurity Compliance & Incident Reporting

The contract requires the implementation of NIST SP 800-171 security controls to protect covered defense information and mandates immediate reporting of any cyber incidents to the Department of Defense within 72 hours of discovery. Compliance with these controls is critical for safeguarding sensitive data and ensuring alignment with federal cybersecurity standards applicable to defense contractors. The contract is structured as a subcontract under the Defense Logistics Agency and falls under NAICS code 541512, indicating it involves computer systems design and related services. Performance obligations are tied to the broader Department of Defense infrastructure, with all cybersecurity measures and incident responses governed by federal requirements and subject to strict timelines.