Cybersecurity Compliance and Incident Response Support

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to safeguard controlled unclassified information and covered defense information. Compliance with DFARS 252.204-7012 is mandatory, necessitating robust technical and procedural measures to protect sensitive data across all systems and networks involved. The contractor must establish processes for immediate reporting of any cyber incidents through the Defense Industrial Base Cybersecurity and Incident Reporting portal, ensuring timely communication to federal authorities. Additionally, all forensic data related to cyber incidents must be preserved in its original state to support investigations and compliance audits, without alteration or deletion. The work is performed as a subcontract under the Defense Logistics Agency, classified under NAICS code 541330 for information technology services, with performance expected in alignment with Department of Defense cybersecurity mandates.