Cybersecurity Compliance and Incident Reporting

The contract requires full implementation of NIST Special Publication 800-171 security controls to safeguard covered defense information within the contractor’s systems and processes. This includes establishing and maintaining adequate cybersecurity measures aligned with federal standards for protecting sensitive unclassified information related to defense programs. The contractor must also manage and execute timely cyber incident reporting through the Defense Industrial Base Cybersecurity and Incident Reporting Portal, ensuring all incidents involving covered defense information are documented, reported, and resolved per mandated timelines and procedures. Compliance is non-negotiable and must be sustained throughout the performance period. The undertaking is structured as a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, and falls under NAICS code 541512 for computer systems design services. The work is positioned to support the broader Department of Defense cybersecurity posture by enforcing standardized protections across the supply chain. Although specific performance location details are not provided, the obligations apply wherever covered defense information is processed, stored, or transmitted. Timely, accurate, and complete reporting through DIBNet is critical to maintaining contractual compliance and ensuring the integrity of defense information ecosystems.