Subcontractor for Operational or Critical Support with DFARS Flow-Down Compliance

The subcontractor is obligated to provide operationally critical support involving covered defense information and must fully comply with the flow-down requirements of DFARS clauses 252.204-7012 and 252.204-7014. This includes implementing robust cybersecurity measures to safeguard unclassified controlled technical information, as well as reporting any cyber incidents affecting the information system within 72 hours of discovery. The subcontractor must also preserve and provide access to all related media necessary for forensic analysis, ensuring complete documentation and evidence retention for government investigations. Compliance is mandatory and non-negotiable for performance under this contract. The work is performed under the authority of the Defense Logistics Agency, a component of the Department of Defense, and is classified under NAICS code 541512 for computer systems design services. The subcontract is tied to contract SPE60526D8504 and delivery order SPE60526FHQV9, with all obligations binding regardless of geographic performance location. Failure to meet these cybersecurity and incident reporting requirements will constitute a breach of contractual obligations and may result in termination, financial liability, or debarment. No set-aside status is designated, making this opportunity open to all qualified entities capable of meeting the stringent defense information protection standards.