Cybersecurity & CUI Safeguarding for Subcontractors

The contract requires implementation of NIST SP 800-171 controls to ensure the protection of Controlled Unclassified Information across the subcontractor supply chain, with strict adherence to cybersecurity standards for safeguarding sensitive data. All parties must establish and maintain appropriate technical, administrative, and physical safeguards aligned with the framework, and are obligated to report any cyber incidents promptly in accordance with federal requirements. Compliance extends downstream through mandatory flow-down provisions, ensuring that all lower-tier subcontractors also meet the same security and reporting obligations without exception. The solicitation is classified as a subcontract under the NAICS code 541512 and is issued by the Department of Defense through the Medical Supply Chain MD Surg FSF office, with performance centered at Dyess AFB, Texas. Responses are due by July 20, 2026, and the contractor is expected to operate in full alignment with federal cybersecurity mandates, with no exceptions or waivers permitted. While specific point of contact details are not provided, the official sourcing portal is accessible through the DIBBS platform for further submission requirements and documentation.