Cybersecurity Compliance & Incident Reporting

This contract requires compliance with NIST SP 800-171 cybersecurity controls to protect controlled unclassified information, ensuring that all systems and processes handling such data meet federal security standards. The contractor must implement and maintain the full suite of required safeguards to prevent unauthorized access, disclosure, or loss of sensitive information. In addition to ongoing compliance, the contract mandates immediate reporting of any cyber incident affecting the confidentiality, integrity, or availability of controlled unclassified information, with all incidents required to be reported to the Department of Defense’s DIBRS system no later than 72 hours after discovery. The work is performed under a subcontract tied to the Defense Logistics Agency under the Department of Defense, with the primary focus on cybersecurity posture and incident response within the defense industrial base. The NAICS code 541511 indicates that the work involves computer systems design and related services, emphasizing the technical nature of the cybersecurity implementation and monitoring tasks required.