Cybersecurity Compliance & CUI Safeguarding

The contract requires implementation and assessment of cybersecurity controls aligned with NIST SP 800-171 Rev 1 to safeguard Controlled Unclassified Information, ensuring all mandated protections are fully enacted and verified. Responsibilities include developing comprehensive System Security Plans that document control implementation strategies and submitting regular compliance reports that include the contractor’s CAGE code to validate identity and authorization. All work must be performed at the specified location in San Antonio, Texas, with an emphasis on meeting federal standards for information security in a defense supply chain context. The solicitation is classified as a subcontract under NAICS code 541611, indicating services in administrative management and general management consulting, and is issued by the Department of Defense’s Medical Supply Chain MD Surg FSF. The response deadline is May 4, 2026, and bidders must submit their proposals by that date to be considered. While no set-aside type is specified, the requirement is tied to a critical defense infrastructure context, making strict adherence to NIST guidelines and accurate reporting non-negotiable for contract award and performance.