Cybersecurity for Covered Defense Information (CDI)

The contract requires the implementation of NIST Special Publication 800-171 security controls to protect Covered Defense Information handled on contractor systems, in full compliance with DFARS clause 252.204-7012. This involves establishing and maintaining appropriate administrative, technical, and physical safeguards to ensure the confidentiality, integrity, and availability of sensitive unclassified information related to defense programs. All systems storing, processing, or transmitting CDI must be configured to meet the specified cybersecurity requirements, with ongoing monitoring and documentation to demonstrate compliance. In addition to control implementation, the contract mandates timely reporting of any cyber incidents involving CDI, including the immediate notification of suspected or confirmed breaches and the provision of detailed forensic data to the Department of Defense as required. The work is performed under a subcontract tied to the Defense Logistics Agency, with the North American Industry Classification System code 541512 indicating it relates to computer systems design services. Compliance is non-negotiable and essential for contract performance, with potential consequences for failure to meet the mandated security and reporting standards.