Controlled Unclassified Information (CUI) Cybersecurity

The contract requires the implementation and ongoing maintenance of cybersecurity controls to protect Controlled Unclassified Information within medical supply chain operations, ensuring strict adherence to NIST SP 800-171 and DFARS regulatory standards. The work is focused on securing systems that handle sensitive data critical to defense medical logistics and must be executed in compliance with federal cybersecurity frameworks governing the protection of CUI. Performance is expected to occur at Fort Bragg, North Carolina, with all technical, operational, and administrative requirements tied directly to the defense acquisition environment. This is a subcontract opportunity under NAICS code 541512 for computer systems design services, with a response deadline of July 27, 2026. The contracting entity is the Department of Defense through the Medical Supply Chain MD Surg FSF office, and the emphasis is on continuous compliance, risk mitigation, and defense of information systems supporting military medical operations. Failure to meet the specified cybersecurity controls may result in noncompliance with federal regulations and potential suspension of contract eligibility. All proposed solutions must demonstrate proven experience with federal cybersecurity mandates and the ability to operate securely in a high-sensitivity DoD environment.