Cybersecurity Compliance and Incident Response

The contract entails the implementation and ongoing maintenance of cybersecurity controls as specified in NIST Special Publication 800-171 to protect covered defense information across all relevant systems and processes. This includes establishing, validating, and sustaining technical and administrative safeguards required to meet federal cybersecurity standards for handling sensitive unclassified information within the Department of Defense supply chain. The contractor is responsible for ensuring continuous compliance through documentation, audits, employee training, and system hardening practices aligned with the NIST framework. Additionally, the contract requires immediate and accurate reporting of any cyber incidents involving covered defense information, following established protocols for detection, analysis, containment, recovery, and notification. Response procedures must be robust, timely, and fully compliant with DOD requirements, ensuring that all incidents are documented, escalated appropriately, and remediated without delay. The work is performed as a subcontract under the Defense Logistics Agency, categorized under NAICS code 541512 for computer systems design services, with performance expected to support defense operations across unspecified locations.