Cybersecurity Compliance & CUI Safeguarding (NIST SP 800-171)

This contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard Controlled Unclassified Information in compliance with NIST Special Publication 800-171 and Defense Federal Acquisition Regulation Supplement requirements. The work is focused on ensuring that all information systems handling CUI meet the established security standards to prevent unauthorized access, disclosure, or compromise, with full alignment to federal cybersecurity frameworks. The performance location is Travis Air Force Base, CA, and the contract is classified as a subcontract under NAICS code 541512, indicating it pertains to computer systems design services supporting defense operations. The solicitation was posted on July 28, 2026, with a response deadline of August 3, 2026, and is managed by the Department of Defense through the Medical Supply Chain MD Surg FSF. The contract mandates strict adherence to technical and procedural requirements for protecting sensitive unclassified data, requiring the contractor to establish, document, monitor, and continuously improve cybersecurity posture in alignment with federal mandates. All activities must be conducted in accordance with the specified location and regulatory framework, with no set-aside provisions defined, meaning the opportunity is open to all qualifying small and large businesses capable of meeting the stringent cybersecurity controls mandated by NIST SP 800-171 and DFARS.