Cybersecurity Compliance & Incident Reporting Services

The contract entails comprehensive cybersecurity support services aligned with NIST SP 800-171 requirements, ensuring the protection of controlled unclassified information within Department of Defense systems. It includes ongoing compliance activities to meet the security controls outlined in the NIST framework, as well as the implementation of procedures for timely cyber incident reporting in accordance with DFARS 252.204-7012. The contractor is responsible for maintaining robust cyber hygiene, conducting regular assessments, and providing incident response capabilities that meet federal mandates for reporting breaches or potential compromises of sensitive data. Additionally, the contract requires the preservation and secure handling of digital media containing covered information, ensuring that all relevant data is retained in compliance with retention policies and chain-of-custody standards. This includes procedures for inventorying, labeling, storing, and disposing of media in a manner that prevents unauthorized access or data loss. The work is performed as a subcontract under the Defense Logistics Agency, with the North American Industry Classification System code 541512 indicating it falls under computer systems design and related services. All activities must adhere strictly to DoD cybersecurity policies and remain aligned with the operational and regulatory expectations of the federal supply chain.