Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires the implementation of NIST Special Publication 800-171 controls to protect Covered Defense Information and ensure alignment with DFARS 252.204-7012 requirements. This includes establishing and maintaining robust cybersecurity measures to safeguard sensitive data, achieving audit readiness through documented policies and procedures, and ensuring timely reporting of any cyber incidents as mandated by federal defense regulations. The focus is on full compliance with the specified standards to meet the Department of Defense’s security expectations for subcontracted work involving controlled unclassified information. This subcontract is issued under the NAICS code 541512 for Computer Systems Design Services and is administered by the Defense Logistics Agency under the Department of Defense. While the specific location of performance is not detailed, the obligations apply wherever the subcontractor handles Covered Defense Information. The contractual requirements emphasize continuous compliance, ongoing monitoring of security controls, and the ability to demonstrate adherence during federal audits. All activities must be conducted in a manner that supports the broader mission of securing military supply chain data and maintaining the integrity of defense-related cyber infrastructure.