Cybersecurity Compliance & Incident Response

The contract requires full implementation of NIST SP 800-171 security controls to protect Controlled Unclassified Information and ensure ongoing compliance with DFARS 252.204-7012 requirements. This includes continuous monitoring of CUI throughout its lifecycle, applying appropriate technical and procedural safeguards, and maintaining documentation to demonstrate adherence to federal cybersecurity standards. All cyber incidents must be reported to the Department of Defense within 72 hours of discovery, with detailed reporting and response actions coordinated to mitigate threats and preserve evidence. The work is being performed under a subcontract tied to the Defense Logistics Agency and falls under NAICS code 541512 for computer systems design services. The contractor is expected to operate in alignment with DoD cybersecurity policies, ensuring secure handling, storage, and transmission of sensitive information as mandated by federal regulations.