Cybersecurity Compliance & IT Security Services

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 on systems that handle covered defense information, ensuring compliance with federal security standards for defense contractors. This includes continuous monitoring, configuration management, access control, and incident response processes to safeguard sensitive data throughout its lifecycle. The contractor must also establish and operate a reliable mechanism for reporting cybersecurity incidents via DIBNet, the Department of Defense’s secure portal for defense industrial base reporting, ensuring timely communication of breaches, anomalies, or potential compromises. All activities under this subcontract are performed in support of the Defense Logistics Agency under the Department of Defense, with the work classified under NAICS code 541512 for computer systems design services. The contract is not subject to a specific set-aside, and performance is expected to occur across locations without geographic restrictions specified. The contractor is responsible for sustaining compliance through regular assessments, documentation, and coordination with government stakeholders to meet evolving security requirements and maintain authorization to process, store, or transmit controlled unclassified information on behalf of the defense industrial base.