Cybersecurity Compliance and Incident Response

This contract requires comprehensive cybersecurity compliance to protect covered defense information by implementing all required controls outlined in NIST Special Publication 800-171, ensuring that systems handling sensitive government data meet federal security standards. The contractor must establish and maintain robust safeguards to prevent unauthorized access, disclosure, or compromise of covered defense information throughout the duration of the engagement. Additionally, the contract mandates immediate reporting of any cyber incidents affecting the system or data, with all incidents required to be reported to the Department of Defense within 72 hours of discovery, using DoD medium assurance certificates for authentication and secure communication during reporting. The contract is structured as a subcontract under the Defense Logistics Agency, classified under NAICS code 541512 for computer systems design services, and is intended to support the Department of Defense’s broader cybersecurity posture. Performance is expected to align with federal cybersecurity mandates, and the contractor must be prepared to demonstrate ongoing compliance through documentation, assessments, and incident response protocols. Although specific location details are not provided, the work is tied to DoD operational requirements and likely supports critical defense logistics functions. All activities under this contract must ensure the integrity, confidentiality, and availability of covered defense information in accordance with strict federal guidelines.