Cybersecurity Compliance and Incident Reporting Support

The contract requires comprehensive cybersecurity services to ensure compliance with NIST SP 800-171 for systems handling Controlled Unclassified Information under DFARS 252.204-7012. This includes implementing and maintaining all required security controls, conducting ongoing assessments to validate adherence, and providing documentation to demonstrate full compliance. The contractor must establish and manage processes for timely cyber incident reporting through the Defense Industrial Base Cybersecurity and Incident Reporting Portal, ensuring all incidents are detected, documented, and reported within mandated timeframes. Additionally, the contractor is responsible for preserving all relevant digital evidence and system data following any incident to support forensic analysis and regulatory investigations. The work is performed under a subcontract in support of the Defense Logistics Agency, an agency within the Department of Defense, with the North American Industry Classification System code 541512 indicating information technology services. The contract is tied to the award SPE60525D4512 with delivery order SPE60526FHRK1 and is currently active as of its posting date in July 2026. While specific performance location and point of contact details are not provided, the scope demands seamless integration with DoD cyber infrastructure and strict alignment with federal cybersecurity standards to protect sensitive unclassified data throughout its lifecycle.