Cybersecurity Compliance and Incident Reporting

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls on systems that handle covered defense information, ensuring compliance with federal cybersecurity standards for nonfederal systems. The contractor must establish, monitor, and sustain technical and administrative safeguards to protect sensitive data, aligning with the requirements set by the Department of Defense for safeguarding information on defense industrial base networks. All activities must be conducted in a manner that supports continuous compliance and readiness for audits or assessments. The contractor is also responsible for managing cyber incident reporting through DIBNet, the Department of Defense’s designated platform for reporting security incidents involving covered defense information. This includes timely detection, documentation, and submission of incident reports in accordance with mandated timelines and formats, as well as coordination with relevant government authorities to facilitate response and remediation efforts. The work is performed under a subcontract tied to the Defense Logistics Agency within the broader Department of Defense acquisition framework, with performance expectations centered on ensuring robust cybersecurity posture and regulatory adherence.