Cybersecurity Compliance Support for Prime Contractor

The contract requires support to implement NIST SP 800-171 security controls in alignment with federal cybersecurity requirements for protecting controlled unclassified information. This includes conducting timely cyber incident reporting, preserving forensic data for investigation and compliance purposes, and ensuring all subcontractors adhere to DFARS 252.204-7012 obligations for safeguarding controlled unclassified information. The work is scoped to support a prime contractor operating under a small business set aside designation, with performance centered on Tinian. The National Institute of Standards and Technology controls must be fully integrated into the contractor’s systems and processes, and ongoing monitoring and documentation are mandatory to maintain compliance and readiness for audits. All activities must align with Department of Defense standards and be executed with strict attention to data integrity and regulatory adherence.