Cybersecurity and CUI Safeguarding (for IT/Systems Providers)

The contract requires the implementation and ongoing maintenance of cybersecurity controls for systems that handle covered defense information, with strict adherence to the National Institute of Standards and Technology Special Publication 800-171 and the Defense Federal Acquisition Regulation Supplement clause 252.204-7012. This subcontract is intended for IT and systems providers tasked with safeguarding controlled unclassified information across federal systems, ensuring data integrity, confidentiality, and availability through established framework requirements. The obligation extends beyond initial configuration to include continuous monitoring, vulnerability management, and compliance validation to meet evolving threat landscapes and regulatory standards. Performance is expected at Joint Base Lewis-McChord with a ZIP code of 98433-5000, under the oversight of the Department of Defense's Medical Supply Chain MD Surg FSF. The North American Industry Classification System code 541512 indicates the work falls under computer systems design and related services. The solicitation was posted on August 9, 2026, with a firm response deadline of August 17, 2026, and is available through the DIBBS platform for potential offerors. Compliance with all applicable cybersecurity measures and documentation requirements is mandatory, and failure to meet these standards could result in contract termination or remediation actions.