Cybersecurity Compliance for Covered Defense Information (CDI)

This contract requires strict adherence to NIST SP 800-171 and DFARS 252.204-7012 to ensure the protection of covered defense information across all systems and processes. The subcontractor must implement comprehensive cybersecurity controls to safeguard sensitive data transmitted, processed, or stored as part of Department of Defense activities, with a clear mandate to report any cyber incidents promptly and accurately in accordance with federal requirements. The work is scoped under NAICS code 541611, indicating professional, scientific, and technical services related to cybersecurity compliance and risk management. The contract is issued under the Defense Logistics Agency, part of the Department of Defense, and is classified as a subcontract without a specific set-aside designation. Performance is not restricted to a specific geographic location, allowing for flexible execution while maintaining full compliance with federal cybersecurity standards. All activities must align with the regulatory framework established for protecting controlled unclassified information in nonfederal systems, and failure to meet these obligations could result in contract termination or penalties. The contractual obligations remain active regardless of the absence of detailed office or point-of-contact information, emphasizing the non-negotiable nature of the cybersecurity requirements.