Cybersecurity Compliance and Incident Response

The contract requires full implementation of NIST SP 800-171 Revision 2 security controls to safeguard controlled unclassified information within the subcontractor’s systems and operations. It mandates immediate reporting of any cyber incidents through the Defense Industrial Base Cybersecurity and Incident Reporting Portal, DIBNet, ensuring timely communication and coordinated response with federal authorities. All requirements under DFARS 252.204-7014 must be flowed down to any subcontractors engaged in the performance of work, ensuring consistent cybersecurity standards across the supply chain. Compliance is expected to be maintained throughout the contract lifecycle with accountability at every tier, aligning with Department of Defense cybersecurity policies for defense industrial base partners. The work is performed under a subcontract awarded by the Defense Logistics Agency under NAICS code 541512, indicating it pertains to custom computer programming services supporting defense systems.