Cybersecurity Compliance and Reporting

This contract mandates the full implementation of NIST Special Publication 800-171 security controls to ensure the protection of controlled unclassified information within information systems supporting Department of Defense operations. The contractor is required to conduct a Self-Assessment Report Scorecard evaluation through the Supplier Performance Risk System to demonstrate compliance with these cybersecurity standards and maintain an up-to-date, accurate record of their security posture. Additionally, the contractor must establish and execute procedures to report any cyber incident affecting covered defense information or contractor systems within 72 hours of discovery, as stipulated under DFARS clauses. Compliance is non-negotiable and applies across all systems and personnel involved in the performance of this subcontract issued by the Defense Logistics Agency under NAICS code 541612 for cybersecurity services.