Cybersecurity Incident Reporting and Safeguarding

The contract requires implementation of NIST Special Publication 800-171 security controls to protect Controlled Unclassified Information (CUI) on all applicable systems, ensuring adherence to federal standards for safeguarding sensitive but unclassified data. This includes establishing technical, administrative, and physical safeguards to prevent unauthorized access, disclosure, or modification of CUI, while maintaining continuous compliance with the specified framework. The contractor must also sustain and operationalize the DFARS clause 252.204-7012 incident reporting procedures, which mandate timely detection, documentation, and reporting of cybersecurity incidents affecting CUI to the appropriate Department of Defense authorities within specified timeframes. This subcontract falls under the NAICS code 541512 for computer systems design services and is issued by the Defense Logistics Agency under the Department of Defense. The performance location and specific agency office details are not provided, but the requirement applies to any system storing, processing, or transmitting CUI under this agreement. Compliance is mandatory and subject to ongoing monitoring and audit, with failure to meet these obligations potentially resulting in contract termination or penalties. The solicitation was posted in June 2026, indicating a future performance period, and the contract is accessible through the DIBBS platform under the award number SPE4A526P5629.