Cybersecurity Compliance & NIST SP 800-171 Assessment

The contract requires full compliance with NIST SP 800-171 to protect controlled unclassified information (CUI) across all systems and processes, mandating the implementation of all 110 security controls outlined in the standard. The contractor must conduct a thorough self-assessment of their cybersecurity posture, document evidence of compliance, and submit findings in alignment with DFARS 252.204-7012 requirements, ensuring transparency and accountability for CUI handling. This is a subcontract under the Department of Defense, specifically tied to the Medical Supply Chain MD Surg FSF, with performance expected at an FPO location using ZIP code 96662. The task is governed by NAICS code 541512, indicating it involves computer systems design and related services, and all submissions must be completed by the deadline of August 3, 2026. Compliance is non-negotiable, and failure to meet documentation or control standards could result in contract termination or financial penalties.