Cybersecurity Compliance and Incident Reporting

The contract mandates the implementation of NIST Special Publication 800-171 security controls and established cyber incident reporting procedures to safeguard Controlled Unclassified Information on non-federal systems. This subcontract is focused on ensuring compliance with federal cybersecurity standards by integrating technical, administrative, and physical safeguards that align with NIST guidelines, specifically tailored to protect sensitive data handled by contractors supporting the Department of Defense. All processes must be fully operational to detect, respond to, and report cyber incidents involving CUI in accordance with regulatory timelines and requirements. The work is performed under the oversight of the Defense Logistics Agency, with the NAICS code 541512 indicating that the services fall within computer systems design and related activities. The contract requires the subcontractor to maintain a robust cybersecurity posture throughout the lifecycle of the engagement, ensuring continuous compliance with NIST SP 800-171 and timely submission of incident reports to federal authorities. While the place of performance and point of contact details are not specified, the work is expected to be carried out across non-federal environments where CUI is processed, stored, or transmitted, and failure to meet these requirements could result in contractual penalties or termination.