Cybersecurity Compliance & Incident Reporting

This subcontract requires the contractor to fully comply with DFARS 252.204-7012, mandating the safeguarding of covered defense information and the reporting of cyber incidents affecting systems that handle such information. The contractor must implement the security requirements outlined in NIST SP 800-171 to protect controlled unclassified information and ensure the integrity, confidentiality, and availability of data processed or stored on company systems. Incident reporting must be conducted promptly through the DoD Cyber Crime Center’s portal, with full cooperation in any subsequent investigation or remediation efforts. The subcontractor is responsible for maintaining continuous compliance throughout the performance period, including training personnel, securing network access, and documenting security controls. This contract applies to all operations supporting the Defense Logistics Agency under NAICS code 541512, and compliance is non-negotiable for contract execution and continued partnership with the Department of Defense.