Cybersecurity Compliance & Incident Reporting (Subcontract Support)

The contract entails providing comprehensive cybersecurity support to subcontractor systems that handle covered defense information, with a primary focus on achieving and maintaining compliance with NIST Special Publication 800-171 Revision 2. This includes implementing required security controls, conducting assessments, and ensuring ongoing adherence to federal standards designed to protect sensitive unclassified information. The support spans the full lifecycle of compliance, from initial gap analysis to continuous monitoring and documentation necessary for audit readiness. In addition to compliance efforts, the contract requires active cyber incident monitoring and timely reporting of any security occurrences affecting subcontractor systems. This involves detecting, analyzing, containing, and formally reporting incidents in accordance with federal reporting requirements and timelines. The work is performed under a subcontract relationship within the Defense Logistics Agency, part of the Department of Defense, and is classified under NAICS code 541512 for custom computer programming services. The obligation is tied to systems processing covered defense information, and all activities must align with the security framework mandated by NIST SP 800-171 Rev 2 to ensure the integrity and confidentiality of defense-related data.