Cybersecurity Compliance and IT Support

This contract requires full adherence to NIST Special Publication 800-171 standards to ensure the protection of covered defense information across all systems and processes. The contractor is obligated to implement and maintain robust cybersecurity controls that align with these guidelines, focusing on the confidentiality, integrity, and availability of sensitive data. Compliance is mandatory and must be continuously monitored, with documented evidence available for review at any time to affirm adherence to federal requirements. The contractor must also support timely and accurate incident reporting in accordance with DFARS 252.204-7012, ensuring that any cybersecurity incidents involving covered defense information are identified, contained, reported, and resolved following prescribed protocols. This includes immediate notification to the appropriate government authorities and active cooperation during investigations. The work is performed as a subcontract under the Defense Logistics Agency, part of the Department of Defense, with the NAICS code 541512 indicating it falls under computer systems design and related services, and is tied to the contract reference SPE7LX22D0068 with delivery order SPE7L126FAZ2Y.