Cybersecurity Compliance for Contractor Systems (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 cybersecurity safeguards on all systems that process, store, or transmit covered defense information, in full compliance with DFARS 252.204-7012. This obligation applies to contractor systems regardless of location and must be sustained throughout the lifecycle of the contract, ensuring that controlled unclassified information remains protected against unauthorized access, disclosure, or compromise. The contractor is responsible for conducting regular assessments, documenting security controls, and demonstrating continuous compliance through audit readiness and timely reporting of any security incidents or deviations. This subcontract falls under NAICS code 541512 and is administered by the Defense Logistics Agency under the Department of Defense. The performance location is not specified, indicating the work may be conducted remotely or across multiple sites, but all systems handling covered defense information must meet the stringent requirements regardless of physical or virtual environment. The contract supports the broader DoD mandate to secure the defense industrial base and is subject to ongoing oversight to ensure the integrity and confidentiality of sensitive defense data.