Cybersecurity and Information Safeguarding (Non-IT Supplier Support)

This contract requires the implementation of NIST SP 800-171 controls to protect covered defense information and ensure full compliance with DFARS 252.204-7012, particularly regarding cyber incident reporting obligations. The scope focuses on non-IT supplier support within the Medical Supply Chain, meaning the contractor must establish and maintain robust cybersecurity measures to safeguard sensitive data even though they are not directly managing IT infrastructure. Compliance with these standards is mandatory and must be integrated into all relevant operational and procedural workflows to meet federal defense requirements. The contract is classified as a subcontract under NAICS code 541512, indicating it involves computer systems design and related services, and is managed by the Department of Defense through the Medical Supply Chain MD Surg FSF. Performance is required at Fort Lewis with a ZIP code of 98433-9500, and the solicitation was posted on July 16, 2026, with responses due by July 22, 2026. Contractors are expected to demonstrate prior experience and capability in meeting NIST and DFARS cybersecurity standards, and failure to comply could result in contract termination or penalties. All activities must align with the Department of Defense's directive to secure the supply chain against cyber threats, with particular emphasis on timely and accurate incident reporting.