Cybersecurity Compliance & Reporting (Subcontract Support)

This subcontract provides support for achieving and maintaining compliance with DFARS 252.204-7012, requiring the implementation of NIST SP 800-171 security controls to safeguard covered defense information on nonfederal information systems. The scope includes establishing technical and procedural measures to ensure data protection, conducting ongoing assessments of cybersecurity posture, and promptly reporting any cyber incidents involving covered defense information in accordance with federal requirements. Additionally, the subcontract mandates the secure destruction of media containing such information using approved methods to prevent unauthorized recovery, ensuring compliance with data handling and disposal standards. The work is performed under the authority of the Defense Logistics Agency, a component of the Department of Defense, and is classified under NAICS code 541512 for computer systems design services, with performance tied to the contract SPE60524D4502 and delivery order SPE60526FHWQ7.