Cybersecurity and CUI Compliance Support

The contract requires comprehensive support for NIST SP 800-171 compliance, including cyber incident reporting and system assessments to protect Controlled Unclassified Information as mandated by DFARS clauses 252.204-7012 and 252.240-7997. The scope centers on ensuring robust cybersecurity controls are implemented and maintained across systems handling CUI, with an emphasis on continuous monitoring, incident response, and audit readiness to meet Department of Defense requirements. The work must be performed at Fort Hood, Texas, with a zip code of 76544, and aligns with the NAICS code 541512 for computer systems design services. This is a subcontract under the Medical Supply Chain MD Surg FSF, part of the Department of Defense, and is intended to enhance the security posture of defense-related systems. Potential vendors must submit responses by July 21, 2026, with the solicitation posted on July 15, 2026. While no set-aside classification is specified, the focus is on fulfilling stringent federal cybersecurity obligations through technical expertise in NIST standards and DFARS compliance. The place of performance is fixed, and all activities must be conducted in alignment with the defined regulatory framework to ensure the integrity and confidentiality of sensitive defense information.