Cybersecurity Compliance & Incident Response Support

The contract requires the provision of comprehensive cybersecurity services to ensure full compliance with DFARS 252.204-7012, mandating the implementation of all NIST SP 800-171 security controls to protect covered defense information. The contractor must establish robust incident detection capabilities and be prepared to report any cybersecurity incidents to the Department of Defense within 72 hours through the DIBNet portal. Additionally, the contractor is obligated to retain forensic data and evidence for a minimum of 90 days following the discovery of an incident to support potential investigations and remediation efforts. This subcontract, issued under the Defense Logistics Agency within the Department of Defense, is classified under NAICS code 541512 for computer systems design services and is intended to support critical defense information infrastructure through proactive and responsive cybersecurity measures.