SBU Information Handling and Data Security Compliance

The contract governs the secure handling, storage, and controlled access to Sensitive But Unclassified information including generator logs, site diagrams, and maintenance reports, ensuring all data is protected against unauthorized access, disclosure, or compromise. It mandates strict protocols for data management aligned with federal standards for SBU materials, requiring that only authorized personnel may access or modify these records, with all access logged and auditable. Physical and digital security measures must be in place to safeguard information throughout its lifecycle, including secure transmission methods and encrypted storage systems. Incident reporting is a critical component of the contract, requiring immediate notification and documentation of any suspected or actual breach, loss, or unauthorized exposure of SBU data. Response procedures must be followed without delay to mitigate damage and ensure regulatory compliance. The work is performed in Phnom Penh under a subcontract for the U.S. Embassy, classified under NAICS code 541611 for management consulting services, indicating that the contractor is expected to deliver both technical and procedural safeguards to maintain the integrity and confidentiality of sensitive operational information critical to embassy infrastructure and maintenance operations.