Cybersecurity Compliance & Incident Reporting

This contract requires the implementation of NIST SP 800-171 cybersecurity controls to protect covered contractor information systems handling sensitive unclassified information. The contractor must ensure full compliance with the specified security requirements outlined in the NIST framework, including access control, audit and accountability, configuration management, and incident response protocols. Additionally, the contractor is obligated to report any cyber incidents through the Defense Industrial Base Cybersecurity and Incident Reporting Portal, DIBNet, using Department of Defense-approved digital certificates to authenticate and secure all communications. The work is performed under a subcontract awarded by the Defense Logistics Agency, a component of the Department of Defense, and falls under the NAICS code 541512 for computer systems design services. Compliance is mandatory and subject to ongoing monitoring and reporting obligations as part of the broader DoD cybersecurity mandate.