Cybersecurity Compliance and Reporting

The contract requires strict adherence to NIST SP 800-171 cybersecurity standards, mandating a minimum compliance score of 110 to ensure adequate protection of covered defense information. The contractor is obligated to conduct regular assessments and submit findings to the Supplier Performance Risk System, maintaining accurate and timely documentation of their cybersecurity posture. Any cyber incidents involving covered defense information must be reported promptly in accordance with established federal reporting protocols. This obligation applies to all activities under the subcontract, which is linked to the Department of Defense through the Defense Logistics Agency, and must be sustained throughout the contract period without exception.