IT Cybersecurity Compliance for Contractor Systems

The contract requires strict adherence to FAR 52.204-27 to ensure all IT systems utilized in performance are secure and free from prohibited covered applications, specifically including those owned or operated by ByteDance such as TikTok. All contractor systems, whether owned or operated, must be assessed and maintained to eliminate any use of these banned applications, with compliance verified throughout the performance period. The obligation extends to all levels of subcontracting, requiring downstream vendors to also meet the same cybersecurity and software restrictions. This subcontract, issued by the Defense Logistics Agency under the Department of Defense, is classified under NAICS code 541512 and falls under broader federal cybersecurity mandates aimed at mitigating risks associated with foreign-connected software. Performance is subject to ongoing monitoring and enforcement, with failure to comply potentially resulting in contract termination or penalties. While specific geographic performance locations are not detailed, the requirement applies universally across all contractor-operated systems engaged in supporting the contract’s objectives, regardless of physical location.