Controlled Unclassified Information (CUI) Safeguarding and NIST SP 800-171 Compliance

This contract focuses on implementing and evaluating NIST SP 800-171 controls specifically for systems managing Controlled Unclassified Information (CUI). It includes conducting a Supplier Performance Risk System (SPRS) assessment and ensuring readiness for the Cybersecurity Maturity Model Certification (CMMC), which underscores the importance of compliance and security in handling sensitive government data. The contract is categorized under the NAICS code 541512, indicating it relates to computer systems design services. Issued by the Department of Defense through its Medical Supply Chain MD SURG FSF unit, the work will be performed in FPO (Fleet Post Office) with the zip code 09592-4500. As a subcontract, the contract does not specify a set-aside type and lacks detailed organizational and point of contact information. Interested parties were expected to respond shortly after the contract posting on May 27, 2026, with a response deadline on June 2, 2026. The scope highlights the emphasis on safeguarding CUI by adhering to established cybersecurity frameworks and meeting government requirements for sensitive data protection.