Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and documentation of cybersecurity controls to safeguard Covered Defense Information in accordance with NIST SP 800-171 standards and the DFARS 252.204-7012 clause, ensuring compliance with Department of Defense requirements for handling sensitive unclassified information. This includes establishing, maintaining, and validating technical, operational, and management safeguards to protect CDI against cyber threats, along with procedures for timely reporting of cybersecurity incidents as mandated by federal regulations. The work falls under a subcontract tied to the Defense Logistics Agency under the Department of Defense, categorized under NAICS code 541512 for computer systems design services. The contract is positioned to support defense-related cybersecurity obligations and requires full adherence to federal standards without the use of set-aside provisions. Performance is expected to meet the security requirements outlined in the regulation, with the primary focus on control implementation, record-keeping, and incident response protocols throughout the lifecycle of the project.