Cybersecurity Compliance and CUI Safeguarding

The contract requires implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information (CUI) throughout all phases of performance. This includes establishing technical, administrative, and physical safeguards to ensure CUI confidentiality, integrity, and availability, while maintaining continuous compliance with federal cyber requirements. The contractor must also establish and sustain processes for timely cyber incident reporting, adhering to all mandated timelines and procedures to address potential breaches or anomalies affecting CUI. The work is performed under a subcontract tied to the Medical Supply Chain MD Surg FSF under the Department of Defense, with performance centered at Davis Mountain AFB, Arizona, 85707-6097. The North American Industry Classification System code 541512 indicates this involves computer systems design and related services. The solicitation closed on July 20, 2026, and was posted on July 14, 2026, indicating a short window for response. Compliance with NIST SP 800-171 is not optional; it is a core requirement for contract execution, and failure to maintain controls or report incidents appropriately may result in non-compliance penalties, termination, or loss of future contracting opportunities.