Cybersecurity Compliance and Incident Response Support

The contract requires comprehensive cybersecurity services to ensure compliance with NIST SP 800-171 standards for systems handling Controlled Unclassified Information. This includes implementing and maintaining all required security controls to protect the confidentiality, integrity, and availability of CUI, with ongoing monitoring and documentation to demonstrate adherence. The contractor must also establish and uphold a robust cyber incident response capability, ensuring any security breach or suspected compromise is reported to the appropriate authorities within 72 hours of discovery. In addition, the contractor is responsible for preserving all relevant forensic data in a manner that supports potential investigations, including logging, memory dumps, network traffic records, and system artifacts, maintaining chain-of-custody protocols to ensure evidentiary integrity. The work is performed under a subcontract for the Defense Logistics Agency, part of the Department of Defense, and is classified under NAICS code 541512 for computer systems design services.