Cybersecurity Compliance Support (CUI Handling)

This contract requires full implementation of DFARS 252.204-7012 to ensure the protection of covered defense information, with strict adherence to NIST SP 800-171 security controls for safeguarding controlled unclassified information. The subcontract mandates the establishment of robust cybersecurity measures to defend against unauthorized access, data breaches, and other cyber threats, including the secure handling, storage, and transmission of sensitive defense data. All systems and processes must be configured to meet the technical and administrative requirements outlined in NIST SP 800-171, covering areas such as access control, audit and accountability, risk assessment, and personnel security. Additionally, the contractor is obligated to promptly report any cybersecurity incidents involving covered defense information to the appropriate government authorities as specified under the DFARS clause, including providing detailed forensic data and mitigation actions taken. Compliance is non-negotiable and applies to all systems, networks, and personnel involved in the handling of controlled unclassified information. The work is performed under the Department of Defense through the Defense Logistics Agency, with the scope focused on ensuring continuous and verifiable cyber readiness in line with federal defense standards, and the subcontract is issued under NAICS code 541512 for computer systems design services.