Cybersecurity Compliance for Covered Defense Information

This contract requires the implementation of NIST SP 800-171 security controls to protect covered defense information as mandated by DFARS 252.204-7012. The subcontractor must establish and maintain a compliant cybersecurity environment capable of safeguarding sensitive government data from unauthorized access, disclosure, or compromise. All systems handling covered defense information must be configured according to the specific technical and operational requirements outlined in NIST SP 800-171, including access controls, audit logging, incident response, and system integrity measures. The contractor is also obligated to report any cyber incidents affecting covered defense information in accordance with DFARS requirements, ensuring timely notification and cooperation with government authorities during investigations. The work falls under NAICS code 541512 for computer systems design services and is administered by the Defense Logistics Agency under the Department of Defense. Performance of the required cybersecurity measures is expected to occur in alignment with federal defense contracting standards, with full compliance being a condition of contract fulfillment.