Cybersecurity Compliance & Incident Reporting Support

The contract requires full adherence to NIST SP 800-171 cybersecurity standards to protect controlled unclassified information within the defense supply chain. It mandates the establishment and maintenance of robust security controls aligned with the framework, ensuring that all systems handling sensitive data meet federal compliance benchmarks. Additionally, the contractor must support timely and accurate cyber incident reporting through the Department of Defense’s Defense Industrial Base Cybersecurity and Incident Reporting Portal, enabling rapid response and coordination with federal authorities in the event of a breach or anomaly. The contractor is responsible for flowing down all applicable cybersecurity requirements to any subcontractors involved in the performance of work, ensuring consistent compliance across the entire subcontracting network. This includes monitoring subcontractor adherence, documenting compliance efforts, and maintaining audit-ready records. The work is performed under the auspices of the Defense Logistics Agency within the Department of Defense, classified under NAICS code 541512 for computer systems design services, with the contract issued as a subcontract and posted on the DIBBS portal for transparency and accountability under federal procurement guidelines.