Cybersecurity Compliance and CUI Protection

This contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard covered defense information in alignment with NIST SP 800-171 standards. The work involves establishing robust technical, administrative, and physical safeguards to protect controlled unclassified information as mandated for Department of Defense contractors, with a strict emphasis on compliance and continuous monitoring. The contractor must also be prepared to detect, report, and respond to cyber incidents in accordance with federal requirements, ensuring timely and accurate communication of breaches or anomalies affecting sensitive data. The contract is structured as a subcontract under the Medical Supply Chain MD Surg FSF, part of the Department of Defense, and is performance-based at a specific location in San Antonio with a ZIP code of 78226. It falls under NAICS code 541512, indicating it relates to computer systems design and related services. The solicitation was posted on April 30, 2026, with a response deadline of May 6, 2026, and all work must be executed in full compliance with federal cybersecurity regulations, including those governing the handling and protection of controlled unclassified information.