Cybersecurity & CUI Safeguarding Compliance

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information within systems that support medical supply chain functions including ordering, invoicing, and logistics through the Web Application for Warehouse and Fulfillment system. Compliance with these controls is mandatory to ensure the protection of sensitive data handled across the Department of Defense’s medical logistics operations. The work is scoped to subcontractor performance and must be executed in strict adherence to federal cybersecurity standards applicable to CUI handling. The contract is issued under the NAICS code 541512 for Computer Systems Design Services and is tied to the Medical Supply Chain MD Surg FSF within the Department of Defense. The place of performance is designated as FPO with ZIP code 96616, indicating the work may involve remote or deployed environments. Responses are due by August 10, 2026, with the solicitation posted on August 4, 2026, and the official solicitation can be accessed via the DIBBS platform using the provided URL. The subcontract is non-set aside, meaning all eligible entities may bid, and successful performance hinges on demonstrating validated, continuous compliance with NIST SP 800-171 requirements throughout the contract lifecycle.