Cybersecurity Compliance and Incident Response Support

This contract requires the implementation of all NIST SP 800-171 security controls to safeguard controlled unclassified information handled by the contractor and its subcontractors. The contractor must establish and maintain processes to report any cyber incidents to the Defense Industrial Base Cybersecurity and Incident Reporting Portal within 72 hours of detection. Preservation of forensic data related to incidents is mandatory to support investigations and compliance audits. All requirements under DFARS 252.204-7012 must be flowed down to any lower-tier subcontractors who handle controlled technical information, ensuring full coverage across the supply chain. The work is performed under a subcontract awarded by the Defense Logistics Agency on behalf of the Department of Defense, and the performance is tied to the secure handling of sensitive defense-related data across all contract tiers.