Cybersecurity Compliance – Covered Defense Information Safeguarding

The contract requires the implementation of NIST SP 800-171 security controls to protect covered defense information across all systems and processes handled under this agreement. This includes establishing and maintaining technical, administrative, and physical safeguards to ensure the confidentiality, integrity, and availability of sensitive data as mandated by the Department of Defense. The contractor must also be prepared to report any cyber incidents promptly according to DFARS requirements and maintain full readiness for DOD assessments to verify compliance with the specified cybersecurity standards. This subcontract falls under the NAICS code 541512 and is issued by the Defense Logistics Agency under the Department of Defense. Performance is expected to support DOD information systems regardless of specific geographic location, with no set-aside designation applied. The contractor is obligated to align all cybersecurity practices with federal guidelines, ensuring continuous compliance throughout the contract lifecycle. Failure to meet these requirements may result in noncompliance penalties, suspension of work, or termination of the subcontract.