Cybersecurity Compliance and Reporting

This contract requires a subcontractor to ensure full compliance with cybersecurity standards mandated for handling covered defense information, specifically adhering to NIST SP 800-171, DFARS 252.204-7012, and the Supplier Performance Risk System (SPRS) requirements. The subcontractor must implement and maintain robust security controls to protect sensitive information, conduct regular assessments, and accurately report compliance status through designated government systems. Failure to meet these standards could result in non-compliance penalties and termination of contractual obligations. The work is performed under a subcontract tied to the Defense Logistics Agency within the Department of Defense, with the NAICS code 541512 indicating information technology services. The contract was posted in July 2026 and is linked to the primary award SPE60124D1521 and delivery order SPE60126FL01P. Although no specific location is provided, performance is expected to align with federal defense cybersecurity protocols regardless of physical or virtual work environment. The subcontractor is responsible for ongoing monitoring, documentation, and timely updates to ensure continuous alignment with evolving defense cybersecurity requirements.