Supply Chain Risk Management & Cybersecurity Compliance

The contract requires full implementation and documentation of compliance with DFARS 252.239-7018 and NIST SP 800-171 to ensure the protection of covered defense information. This includes establishing security controls across systems and processes that handle such information, conducting regular assessments to verify adherence, and maintaining rigorous documentation to demonstrate ongoing compliance. The focus is on safeguarding sensitive data throughout the supply chain by identifying, assessing, and mitigating cyber risks associated with third-party vendors and internal operations. Efforts must align with Department of Defense standards to reduce vulnerabilities and prevent unauthorized access, disclosure, or compromise of covered defense information. The contractor is responsible for integrating these requirements into all relevant business functions, ensuring that all personnel are trained and aware of their roles in maintaining cybersecurity posture. The work will be performed under the auspices of the Defense Logistics Agency as part of a subcontract tied to broader national defense objectives, with strict accountability for meeting federal cybersecurity mandates without exceptions.