Cybersecurity Compliance (NIST SP 800-171)

The contract requires implementation and maintenance of cybersecurity controls based on NIST Special Publication 800-171 for systems that process, store, or transmit covered defense information. This includes ensuring all required safeguards are in place and continuously operational to protect sensitive data from unauthorized access, disclosure, or compromise. Compliance must be maintained throughout the contract lifecycle, with regular assessments and remediation of any control deficiencies to meet federal cybersecurity standards for defense contractors. The contractor is obligated to report any cybersecurity incidents affecting covered defense information through the Defense Industrial Base Cybersecurity and Incident Reporting Portal, known as DIBNet. All incident reports must be submitted in accordance with established timelines and procedures to ensure timely response and coordination with federal authorities. The contract falls under the Department of Defense and is managed by the Defense Logistics Agency, with the North American Industry Classification System code 541512 indicating it is tied to computer systems design services. The work is expected to be performed under a subcontract arrangement, with no specific location designated for performance.