Cybersecurity Compliance and Incident Reporting Support

The contract requires comprehensive cybersecurity compliance support to meet Defense Federal Acquisition Regulation Supplement (DFARS) clauses 252.204-7012 and 252.204-7014, specifically for prime contractors and subcontractors within the Defense Industrial Base. Key deliverables include the full implementation of National Institute of Standards and Technology Special Publication 800-171 controls to safeguard Controlled Unclassified Information, continuous cyber incident detection capabilities, and the development and maintenance of Plans of Action and Milestones to address identified security gaps. Additionally, the contractor must support timely and accurate reporting through the Defense Industrial Base Cybersecurity Assessment and Reporting Portal, ensuring compliance with mandatory incident notification timelines and data submission standards. The work is performed under a subcontract awarded by the Defense Logistics Agency, part of the Department of Defense, and is classified under NAICS code 541512 for Computer Systems Design Services. The contract’s performance location and point of contact details are not specified, but the required activities are critical to maintaining the security posture of defense supply chain systems. All efforts must align with federal cybersecurity mandates to protect sensitive DoD information handled by contractors and subcontractors, with strict adherence to reporting protocols and remediation timelines to avoid noncompliance penalties.