Cybersecurity Compliance for Contractor Systems

The contract requires the implementation and ongoing maintenance of cybersecurity controls for contractor systems that process, store, or transmit federal contract information, ensuring full alignment with the National Institute of Standards and Technology Special Publication 800-171. This includes establishing robust access controls, audit and accountability measures, configuration management, incident response protocols, and continuous monitoring to protect sensitive data and meet federal compliance standards. The contractor must demonstrate ongoing adherence to these controls and be prepared to undergo assessments to verify compliance at any point during the contract period. This subcontract is issued under the Defense Logistics Agency, a component of the Department of Defense, and falls under the NAICS code 541512 for computer systems design services. The work is expected to support secure handling of federal information across contractor environments, with performance obligations tied to maintaining the integrity and confidentiality of data throughout the system lifecycle. The contract does not include a set-aside designation, and while the specific location of performance is not defined, the cybersecurity measures must be consistently applied regardless of physical or operational context. The contract was posted on June 24, 2026, and is active under the procurement reference SPE7L426D61SK with delivery order SPE7L126F022Q.