Cybersecurity Compliance for Contract Data Systems

Systems managing contract data, including WAWF submissions and order processing, must adhere to NIST SP 800-171 Rev 2 cybersecurity requirements to protect controlled unclassified information. If cloud services are utilized, those systems must also meet FedRAMP Moderate security controls to ensure compliance with federal standards for cloud-based data handling. This subcontract, issued under the Defense Logistics Agency within the Department of Defense, applies to all contractors responsible for processing or storing contract-related data and requires implementation of robust security measures across the entire data lifecycle. The contract is classified under NAICS code 541512 and remains active with no set-aside designation, and performance may occur at any location designated by the contractor or the agency.