Cybersecurity Compliance and Incident Response

The contract requires the implementation of NIST SP 800-171 cybersecurity controls to safeguard covered defense information, ensuring compliance with federal standards for protecting sensitive data within the defense supply chain. The contractor must establish and maintain robust security measures that align with the framework outlined in NIST SP 800-171, covering areas such as access control, audit, configuration management, and incident response. In addition to control implementation, the contractor is responsible for managing cyber incident reporting procedures, ensuring timely and accurate notification of any security breaches or anomalies involving covered defense information to the appropriate authorities. The contractor must also preserve forensic data related to any cyber incidents, maintaining the integrity and availability of digital evidence to support investigations and compliance audits. This includes collecting, securing, and storing relevant logs, system images, and other artifacts in a manner that meets legal and regulatory requirements. The work is performed under a subcontract awarded by the Defense Logistics Agency, part of the Department of Defense, and falls under the NAICS code 541512 for computer systems design services. The contract is effective as of August 5, 2026, and performance is expected to meet all Department of Defense cybersecurity mandates without geographic restrictions specified.