Cybersecurity Compliance & NIST SP 800-171 Implementation

The contract requires full implementation of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information across all applicable systems and processes. This includes establishing, maintaining, and validating compliance with the specified framework to ensure data integrity, confidentiality, and availability in alignment with Department of Defense requirements. The contractor must perform regular self-assessments to validate adherence to these controls and document findings as part of an ongoing compliance posture. Additionally, the contract mandates the ability to support cyber incident reporting within a strict 72-hour window through the Defense Industrial Base Cybersecurity Information Sharing Portal, known as DIBNet. This includes detection, analysis, escalation, and reporting of any potential cybersecurity events affecting CUI. The work is performed under a subcontract tied to the Defense Logistics Agency, operating under NAICS code 541512 for computer systems design services, and is governed by the broader cybersecurity expectations of the Department of Defense.