Cybersecurity Compliance and Reporting

This contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to protect covered defense information, ensuring comprehensive safeguarding measures are in place across all relevant systems. The contractor must develop and sustain a detailed System Security Plan that documents policies, procedures, and technical controls necessary for compliance, while also establishing protocols for timely cyber incident reporting in accordance with federal requirements. The work is performed as a subcontract under the Department of Defense, specifically supporting the Defense Logistics Agency, and is classified under NAICS code 541512 for computer systems design services. All activities must be executed to meet stringent defensive cybersecurity standards, with continuous adherence to regulatory obligations throughout the performance period.