Cybersecurity Compliance and CUI Handling

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information and ensure full compliance with DFARS 252.204-7012. This effort is critical for protecting sensitive data handled within the defense supply chain and involves establishing technical, administrative, and physical safeguards aligned with federal cybersecurity standards. The work must be performed at the designated place of performance in San Antonio, Texas, with all activities focused on securing systems and processes that store, process, or transmit Controlled Unclassified Information. This is a subcontract under the Department of Defense, specifically tied to the Medical Supply Chain MD Surg FSF, and falls under the NAICS code 541512 for computer systems design services. The solicitation was posted on August 9, 2026, with a response deadline of August 17, 2026, indicating a short window for qualification and proposal submission. Contractors must demonstrate proven experience in executing NIST 800-171 controls and achieving DFARS compliance, as failure to meet these requirements could result in loss of contract eligibility or noncompliance penalties. The emphasis is on operational readiness, continuous monitoring, and documentation to validate adherence throughout the lifecycle of the subcontract.