Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information handled by the subcontractor. Compliance with these controls is mandatory to meet the cybersecurity standards outlined in the DFARS regulations, ensuring that sensitive data is properly secured against unauthorized access, disclosure, or compromise. The subcontractor must also establish and sustain processes for the timely detection, reporting, and response to any cyber incidents involving covered defense information, in strict accordance with federal requirements. This subcontract falls under the NAICS code 541512 for computer systems design services and is issued by the Defense Logistics Agency under the Department of Defense. The work is intended to support federal cybersecurity obligations, and while specific performance locations and points of contact are not provided, the obligation to adhere to NIST and DFARS standards applies regardless of location. The contract is not designated for any specific set-aside program and is positioned under a broader defense acquisition framework to reinforce the security posture of the defense industrial base.