Cybersecurity Compliance and Incident Reporting for CDI Handlers

This contract requires the implementation of NIST SP 800-171 security controls to protect Covered Defense Information associated with fuel delivery operations, ensuring full compliance with DFARS 252.204-7012. The subcontractor must establish, maintain, and enforce a robust cybersecurity posture that safeguards sensitive data from unauthorized access, disclosure, or exfiltration, with specific attention to systems and networks handling defense-related fuel logistics information. All systems must meet the specified technical and managerial requirements outlined in NIST SP 800-171, including access control, audit and accountability, incident response, and system and communications protection. The contractor is also obligated to report any cybersecurity incidents involving Covered Defense Information promptly and in accordance with DFARS requirements, providing detailed documentation and cooperating with government investigations as needed. This work falls under NAICS code 541512, indicating it is related to computer systems design services, and is administered by the Defense Logistics Agency under the Department of Defense. Performance of the obligations under this subcontract is expected to occur in support of federal defense operations, with full accountability for maintaining compliance throughout the contract lifecycle.