Cybersecurity and CUI Compliance Support

The contract requires implementation and ongoing maintenance of NIST SP 800-171 security controls to protect Controlled Unclassified Information throughout the entire order processing, shipping, and invoicing lifecycle. This includes establishing and sustaining the necessary technical, administrative, and physical safeguards to ensure CUI remains secure during all phases of handling. The contractor must also maintain a current System Security Plan and Plan of Action and Milestones, ensuring continuous compliance and documentation of security posture and remediation efforts. Additionally, the contractor is responsible for timely incident reporting in accordance with federal requirements, ensuring any breaches or anomalies involving CUI are detected, documented, and escalated without delay. Performance is tied to a specific location at Fort Bliss with a zip code of 79916-2527, and the work falls under NAICS code 541512, indicating it involves custom computer programming and related services. The contract is structured as a subcontract under the Department of Defense's Medical Supply Chain MD Surg FSF, with a response deadline of July 29, 2026. All activities must align strictly with federal cybersecurity standards, emphasizing proactive defense, continuous monitoring, and rigorous documentation to meet DoD requirements for handling sensitive but unclassified information in a defense supply chain environment.