Cybersecurity Compliance and Incident Response

The contract requires full implementation of NIST SP 800-171 cybersecurity controls to protect controlled unclassified information handled under the agreement. Continuous monitoring for cyber incidents is mandatory, with all incidents required to be reported to the Department of Defense within 72 hours of discovery. Forensic images of affected systems must be preserved and made available upon request for DoD investigative purposes. The work falls under NAICS code 541512 and is classified as a subcontract awarded by the Defense Logistics Agency under the broader purview of the Department of Defense. Performance obligations are tied to compliance with DFARS 252.204-7012, ensuring alignment with federal cybersecurity standards for defense contractors.