Cybersecurity Compliance & Incident Reporting

This contract requires comprehensive cybersecurity compliance to support the implementation of NIST Special Publication 800-171 standards, ensuring that covered defense information is protected in accordance with federal requirements. The contractor must establish and maintain robust security controls to safeguard sensitive information and must be prepared to report any cyber incidents to the Department of Defense through the DIBNet portal within a strict 72-hour window of discovery. In addition to timely reporting, the contractor is obligated to preserve all relevant forensic data associated with any incident, ensuring that evidence remains intact and available for subsequent investigation or analysis. The work is performed under a subcontract awarded by the Defense Logistics Agency, operating within the broader Department of Defense framework, and is classified under NAICS code 541512 for computer systems design services. All activities must align with DoD cybersecurity mandates without deviation, and failure to meet these obligations could result in contractual penalties or loss of access to defense systems.