Cybersecurity Compliance and Reporting

This contract requires strict adherence to NIST SP 800-171 and DFARS 252.204-7020 standards to safeguard controlled unclassified information across all covered systems. The scope includes conducting comprehensive system assessments to identify security gaps, developing and maintaining a Plan of Action and Milestones to address deficiencies, and ensuring timely and accurate reporting of cybersecurity incidents involving CUI. All activities must be performed in alignment with federal cybersecurity requirements to maintain the integrity and confidentiality of sensitive defense-related data. The work is executed as a subcontract under the Defense Logistics Agency, part of the Department of Defense, with the NAICS code 541512 indicating information technology services. Performance is expected to be carried out in accordance with DLA’s cybersecurity protocols, though the exact location of performance is not specified. The contract was posted on June 25, 2026, and is identified by the award and delivery order numbers SPE7L425D62QY and SPE7L026F5126, respectively. Compliance is non-negotiable, and failure to meet reporting or remediation timelines may result in contractual penalties or termination.