Cybersecurity Compliance & Incident Reporting Support

The contract requires the implementation and ongoing maintenance of cybersecurity controls outlined in NIST SP 800-171 for systems that process, store, or transmit covered defense information. This includes ensuring all required security controls are properly configured, monitored, and documented to meet federal compliance standards. A critical component of the work involves continuous incident detection capabilities and the mandatory reporting of any cybersecurity incidents to the Department of Defense via DIBNet within 72 hours of discovery. Additionally, the contractor must preserve all affected media and digital evidence in accordance with established protocols to support forensic analysis and regulatory requirements. The contract is structured as a subcontract under the Defense Logistics Agency, part of the Department of Defense, and falls under NAICS code 541512 for computer systems design services. The work is focused on supporting the DoD’s cybersecurity posture through rigorous compliance and timely incident response. All activities must align with federal mandates to protect sensitive defense information, and the contractor is expected to maintain operational readiness for incident response at all times. No specific location is designated for performance, indicating the work may be conducted remotely or across multiple sites as needed to support the contracted systems.