Cybersecurity Compliance and Incident Reporting (for Subcontractors)

This subcontract, issued by the Defense Logistics Agency under the Department of Defense, requires the implementation of NIST SP 800-171 cybersecurity controls to protect covered defense information. It mandates the reporting of any cyber incidents within 72 hours of discovery and requires the preservation of forensic artifacts related to such incidents for a minimum of 90 days. The contract falls under NAICS code 541512, indicating a focus on computer systems design and related services. The solicitation was posted on May 1, 2026, with a response deadline of May 13, 2026. While specific location details for performance or points of contact are not provided, the contract is aimed at subcontractors tasked with ensuring compliance with stringent cybersecurity protocols to safeguard sensitive defense information. The goal is to enhance incident response capabilities and maintain thorough forensic evidence to support investigations or remediation efforts.