Cybersecurity Compliance and Reporting Support (DFARS 252.204-7012)

The contract requires full implementation of the cybersecurity controls outlined in NIST Special Publication 800-171 to protect controlled unclassified information on nonfederal systems. It mandates continuous monitoring for cyber incidents and immediate reporting of any confirmed breaches through the Defense Industrial Base Cybersecurity and Incident Reporting Portal, known as DIBNet, within a strict 72-hour window. Compliance with these requirements is tied to DFARS clause 252.204-7012, which applies to all subcontractors handling sensitive defense information. The work falls under NAICS code 541512 for computer systems design services and is issued as a subcontract under the Defense Logistics Agency, a component of the Department of Defense, with performance expected to occur across any location where covered information is processed or stored.