Cybersecurity Compliance & Incident Response

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls across all systems that handle covered defense information, ensuring compliance with federal cybersecurity standards for protected data. Continuous monitoring for cyber incidents is mandated, with a strict requirement to report any confirmed or suspected incidents to the Department of Defense Cyber Crime Center within 72 hours. The scope of work is focused on sustaining a secure environment aligned with Defense Logistics Agency expectations under the broader Department of Defense cybersecurity framework, with performance tied to timely detection, response, and reporting protocols. The subcontract falls under NAICS code 541512, indicating it involves computer systems design and related services, and is governed by the procurement terms associated with contract SPE3SE26D0001 and delivery order SPE3SE26F0792.