Cybersecurity Compliance for Covered Defense Information (CDI)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information (CUI) handled under the Defense Logistics Agency’s subcontract. Compliance with these controls is mandatory to meet the cybersecurity standards set forth by DFARS 252.204-7012, ensuring that all systems processing, storing, or transmitting CUI are adequately protected against unauthorized access, disclosure, or compromise. The contractor is obligated to report any cyber incidents involving CUI to the appropriate authorities within 72 hours of discovery, with full cooperation in any subsequent investigation or response efforts. This subcontract falls under the NAICS code 541512, indicating it is related to computer systems design services, and is tied to the Department of Defense’s broader cybersecurity initiatives for defending sensitive defense information.