Cybersecurity and Information Systems Safeguarding

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 controls to protect covered defense information and ensure strict adherence to cyber incident reporting requirements. This subcontract falls under NAICS code 541512 and is tied to the Department of Defense through the Medical Supply Chain MD Surg FSF, with performance duties centered at Lackland AFB, Texas, 78236-5638. The obligation is not just technical but compliance-driven, mandating continuous alignment with federal cybersecurity standards to safeguard sensitive defense data against threats and vulnerabilities. All activities must be conducted to meet the full scope of NIST's outlined security controls, including configuration management, access control, audit logging, and incident response procedures. The solicitation was posted on August 2, 2026, with proposals due by August 10, 2026, indicating a tight turn around for potential subcontractors to demonstrate capability, experience, and readiness to execute within the DoD’s cybersecurity framework. Although no set-aside designation is specified, the nature of the work necessitates proven expertise in handling classified or controlled unclassified information within defense supply chains. The place of performance at Lackland AFB suggests integration with military systems and infrastructure, requiring close coordination with federal and contractor personnel. Compliance is non-negotiable, and failure to maintain controls or report incidents as required could result in contract termination or penalties under federal acquisition regulations.