Cybersecurity Compliance & Incident Reporting Support

The contract supports implementation of NIST SP 800-171 cybersecurity requirements and ensures compliance with DFARS cyber incident reporting obligations for a Defense Logistics Agency subcontract. It focuses on enabling the contractor to meet federal standards for protecting controlled unclassified information within covered contractor information systems, including the development and enforcement of security controls, documentation of compliance practices, and procedures for detecting and reporting cyber incidents as mandated by DFARS. The scope requires expertise in navigating the intersection of NIST guidelines and defense acquisition regulations to maintain continuous compliance and readiness for audits or incident investigations. This subcontract is tied to contract SPE60524D4502 under the Department of Defense and is classified under NAICS code 541512 for computer systems design services. The work is performed in support of broader DoD cybersecurity initiatives with no geographic restrictions specified. The contract aims to establish structured processes for ongoing monitoring, risk management, and timely reporting of cyber events, ensuring alignment with defense information security policies. All activities must be completed in accordance with federal requirements to safeguard sensitive defense data and fulfill contractual obligations related to information protection.