Cybersecurity Compliance & Incident Reporting Support

This contract requires the implementation of NIST SP 800-171 Rev 2 security controls and full compliance with DFARS 252.204-7012 to safeguard Covered Defense Information within the contractor’s information systems. The scope centers on establishing, maintaining, and continuously monitoring a cybersecurity framework that meets federal standards for protecting sensitive defense data against unauthorized access, disclosure, or compromise. All systems handling such information must be configured, audited, and documented to align precisely with the requirements of NIST SP 800-171 Rev 2, ensuring that technical, administrative, and physical safeguards are effectively enforced. The contractor is also obligated to report any cyber incidents impacting Covered Defense Information in accordance with DFARS requirements, including timely notification to the Department of Defense and submission of detailed incident reports through the designated reporting portal. This includes identifying the nature and scope of the incident, preserving evidence, and cooperating with any subsequent investigations. The work is being performed under a subcontract for the Defense Logistics Agency, a component of the Department of Defense, and the performance is tied to systems supporting national defense operations, making adherence to these security and reporting protocols critical for mission integrity and regulatory compliance.