Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to safeguard Covered Defense Information, which includes technical data and Unique Identification Information. Compliance with these standards is mandatory to ensure the confidentiality, integrity, and availability of sensitive defense-related information handled by the contractor. The contractor must establish, monitor, and enforce security measures that meet the specified framework across all systems processing or storing such data. Additionally, the contractor is obligated to report any cyber incidents affecting Covered Defense Information in accordance with DFARS 252.204-7012, ensuring timely notification and cooperation with Department of Defense authorities. This subcontract under the Department of Defense, specifically managed by DLA Land Warren, is classified under NAICS code 541512 and is intended to support secure handling of critical defense information, with performance expected to occur within the broader scope of federal defense operations.