Supply Chain Risk Management & Cybersecurity Compliance

The contract requires implementation of NIST SP 800-171 and FAR 52.204-21 safeguards to ensure the protection of controlled unclassified information within the supply chain, aligning with Department of Defense cybersecurity compliance standards. The subcontractor must establish and maintain appropriate administrative, technical, and physical controls to secure sensitive data throughout all phases of performance, with a focus on mitigating risks associated with third-party vendors and external systems. Compliance is mandatory and will be continuously monitored to uphold the integrity of the defense industrial base. This action falls under NAICS code 541512, indicating the work involves computer systems design and related services, and is issued by the Defense Logistics Agency under the Department of Defense. The contract is structured as a subcontract with no set-aside designation, and the place of performance is not specified, suggesting potential for remote or distributed operations. Although no point of contact is listed, the contract can be referenced using the provided DIBBS link, and all activities must adhere strictly to federal cybersecurity requirements to safeguard national security information.