Cybersecurity Compliance and Incident Reporting (IT Support)

The contract involves the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to protect Controlled Unclassified Information (CUI) across systems and networks supporting Defense Logistics Agency operations. It requires full compliance with DFARS 252.204-7012, including timely reporting of cyber incidents and accurate documentation of security posture to ensure adherence to federal defense cybersecurity standards. The work is scoped as a subcontract under the NAICS code 541512, focusing on IT support services that enable secure handling, storage, and transmission of sensitive defense-related data. The contractor is responsible for sustaining continuous compliance through regular assessments, control validations, and incident response procedures as mandated by Department of Defense requirements.