Cybersecurity Compliance & Reporting for Subcontractors

Subcontractors handling Covered Defense Information are required to fully implement the cybersecurity requirements outlined in NIST Special Publication 800-171 Revision 2 to safeguard sensitive data. Compliance with these standards is mandatory and applies to all systems and processes that store, process, or transmit Covered Defense Information. Any cyber incident affecting such information must be reported promptly through the Defense Industrial Base Cybersecurity and Incident Reporting Portal, known as DIBNet, to ensure timely response and coordination with federal authorities. Failure to adhere to these protocols may result in contractual penalties or loss of eligibility to participate in defense-related work. The contract is issued under the Department of Defense through the Defense Logistics Agency and applies to subcontractors operating within the NAICS code 541512, which covers custom computer programming services. All parties must maintain ongoing compliance with these cybersecurity mandates throughout the duration of their engagement.