Cybersecurity Compliance & Incident Reporting Support

The contract requires the provision of cybersecurity services fully aligned with NIST SP 800-171 standards to safeguard covered defense information on systems operated within the Department of Defense environment. Core responsibilities include real-time incident detection, timely reporting through the Defense Industrial Base Cybersecurity and Supply Chain Risk Management portal, and the proper preservation of forensic media in accordance with federal guidelines to ensure the integrity of evidence during security events. These services must support continuous compliance and rapid response capabilities to protect sensitive data from unauthorized access, exfiltration, or compromise. All activities must be executed in support of the Defense Logistics Agency’s mission to maintain secure and resilient information systems across the defense industrial base. The subcontractor is expected to adhere strictly to NIST controls relating to access management, audit tracking, configuration hygiene, and incident response procedures. Work performed will involve direct interaction with classified or controlled unclassified information, mandating stringent handling protocols and documentation practices. The contract is effective as of July 31, 2026, and is governed under NAICS code 541512 for computer systems design services, with performance location and administrative details managed under the broader DOD infrastructure.