Cybersecurity for Covered Defense Information (CDI) Handling

This contract mandates the protection of covered defense information, including pickup logs and inspection reports, in strict adherence to the security requirements outlined in NIST Special Publication 800-171 and the Defense Federal Acquisition Regulation Supplement clause 252.204-7012. The subcontractor is required to implement and maintain a robust cybersecurity program that ensures the confidentiality, integrity, and availability of sensitive defense data, with comprehensive controls covering access management, incident response, audit logging, and system configuration. Compliance is non-negotiable and must be continuously monitored and documented to meet federal standards for safeguarding controlled unclassified information. The contract is issued under the Defense Logistics Agency, part of the Department of Defense, and falls under NAICS code 541512, indicating it involves computer systems design and related services. It is structured as a subcontract and applies to all covered defense information handled by the contractor, regardless of geographic location. While the place of performance and point of contact details are unspecified, the contractual obligations remain binding and must be fulfilled in alignment with federal cybersecurity mandates. Failure to comply may result in contract termination, financial penalties, or loss of eligibility for future DoD work.