Cybersecurity Compliance & Incident Reporting (Non-Technical Support)

The contract requires administration of cybersecurity compliance under DFARS 252.204-7012, with specific focus on implementing the National Institute of Standards and Technology Special Publication 800-171 security requirements for protecting controlled unclassified information. This includes establishing and maintaining processes to ensure adherence to access controls, audit logs, media protection, system and communications protection, and other NIST SP 800-171 controls across all covered systems. The contractor must also manage cyber incident reporting procedures, ensuring timely notification and response to any security breaches or anomalies that could impact the integrity, confidentiality, or availability of sensitive defense information. This is a non-technical support subcontract under the Defense Logistics Agency, categorized under NAICS code 541611 for management consulting services, and is intended to provide the operational and procedural framework necessary to meet federal cybersecurity mandates. The contract does not involve direct technical implementation of security tools or infrastructure but rather focuses on policy, documentation, training, and oversight to sustain compliance. The award was posted on June 25, 2026, and is linked to contract SPE7M026V4425, with performance expected to occur across Department of Defense operations without specification of a physical location.