Cybersecurity Compliance (NIST SP 800-171 & CMMC Level 2)

The contract requires the implementation and maintenance of cybersecurity controls to safeguard Controlled Unclassified Information in accordance with DFARS 252.204-7012, aligning with the NIST SP 800-171 security requirements and ensuring compliance with CMMC Level 2 standards. The work involves establishing, monitoring, and sustaining a security posture that meets federal defense cybersecurity mandates, with a focus on protecting sensitive unclassified data processed, stored, or transmitted within subcontractor systems. This is a subcontract under the Department of Defense, specifically managed by the Defense Logistics Agency, and is classified under NAICS code 541512, indicating it relates to computer systems design and related services. The implementation must cover all required security controls including access control, audit and accountability, configuration management, incident response, and risk assessment, with ongoing compliance verification to meet evolving defense cybersecurity expectations.