Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation of NIST SP 800-171 security controls to safeguard covered defense information throughout the execution of the order, ensuring compliance with DFARS 252.204-7012. This includes establishing and maintaining appropriate administrative, technical, and physical safeguards to protect sensitive data from unauthorized access, disclosure, or compromise, as well as establishing procedures for timely reporting of any cyber incidents that may affect the integrity, availability, or confidentiality of the information. The subcontract is issued under the Department of Defense through the Defense Logistics Agency and is classified under NAICS code 541512, indicating it relates to computer systems design services. Performance requirements are aligned with federal cybersecurity standards and apply to all activities associated with handling covered defense information during contract execution.