Cybersecurity Compliance and Incident Response

The contract requires strict adherence to NIST SP 800-171 cybersecurity standards to ensure the protection of controlled unclassified information across all systems involved. Compliance is mandatory and must be actively maintained throughout the duration of the agreement, with ongoing assessments and remediation efforts as needed to meet federal security requirements. Any cyber incident affecting these systems must be reported through the Defense Industrial Base Cybersecurity and Infrastructure Protection Network within 72 hours of discovery, ensuring timely visibility and coordinated response across the Department of Defense. This subcontract operates under the NAICS code 541512 and is managed by the Defense Logistics Agency under the broader umbrella of the Department of Defense, with performance obligations tied to federal cybersecurity protocols and incident reporting timelines.