Cybersecurity Compliance and Incident Reporting Support

The contract requires the implementation and ongoing maintenance of cybersecurity systems aligned with NIST SP 800-171 standards to protect Controlled Unclassified Information, ensuring all technical, administrative, and physical safeguards are properly configured and sustained. This includes continuous monitoring, vulnerability management, and documentation to meet federal compliance requirements for handling sensitive defense-related data. The contractor is responsible for establishing protocols that enable prompt cyber incident reporting through the Defense Industrial Base Cybersecurity Information Sharing Portal, DIBNet, and for preserving forensic images of affected systems to support incident analysis and regulatory compliance. The work is performed as a subcontract under the Defense Logistics Agency, part of the Department of Defense, with the NAICS code 541512 indicating it falls under computer systems design services. The contract’s performance location and point of contact details are not specified, but the scope demands strict adherence to federal cybersecurity directives and timely response capabilities for incidents involving CUI. The systems and processes established must be capable of rapid evidence collection and chain-of-custody preservation to meet DoD investigation and audit requirements.