Cybersecurity and CUI Protection Support

The contract requires comprehensive cybersecurity compliance for systems handling Controlled Unclassified Information (CUI), mandating full implementation of the NIST SP 800-171 security controls to safeguard sensitive data. This includes establishing technical, administrative, and physical safeguards to ensure confidentiality, integrity, and availability of CUI, along with timely reporting of any cyber incidents in accordance with federal requirements. The scope applies to all systems and networks supporting operations under this subcontract, with an emphasis on continuous monitoring, risk mitigation, and adherence to the latest cybersecurity standards. The subcontract is issued under the NAICS code 541512 for computer systems design services, with performance located at Fort Campbell, ZIP 42223-5000, under the oversight of the Department of Defense’s Medical Supply Chain MD Surg FSF. The solicitation was posted on July 20, 2026, with a response deadline of July 27, 2026, indicating a tight turnaround for proposers to demonstrate capability in meeting stringent federal cybersecurity obligations. All responses must show proven experience with NIST 800-171 compliance, incident response protocols, and the ability to operate securely within a DoD environment.