Cybersecurity Compliance (NIST SP 800-171 / DFARS 252.204-7012)

The contract requires the implementation and ongoing maintenance of cybersecurity controls as outlined in NIST SP 800-171 for all systems that process, store, or transmit Covered Defense Information, ensuring full compliance with DFARS 252.204-7012. This includes establishing robust safeguards to protect sensitive data, conducting regular assessments of control effectiveness, and fulfilling mandatory incident reporting obligations in the event of a cybersecurity breach or compromise. The contractor must also maintain compliance with the Supplier Performance Risk System, ensuring accurate and timely submission of required cybersecurity posture data to meet federal reporting standards. The work is performed under a subcontract awarded by the Defense Logistics Agency, part of the Department of Defense, with the North American Industry Classification System code 541512 indicating it involves computer systems design services. While no specific location is designated for performance, the obligations apply to all systems handling Covered Defense Information regardless of physical or logical location. The contract emphasizes continuous compliance through active monitoring, documentation, and adherence to federal cybersecurity mandates, with failure to meet requirements potentially impacting contract standing and eligibility for future DOD work.