Cybersecurity Compliance and Reporting (NIST SP 800-171)

This contract requires the implementation and ongoing maintenance of security controls outlined in NIST Special Publication 800-171 to safeguard controlled unclassified information within covered contractor information systems. The scope includes developing a comprehensive System Security Plan that documents the organization’s approach to meeting these requirements, ensuring all applicable controls are properly configured, monitored, and documented. The contractor must also establish and adhere to procedures for timely cyber incident reporting as mandated by DFARS clauses, ensuring any security breaches or potential compromises are identified, contained, and reported to the appropriate government authorities without delay. The work is performed under a subcontract and is tied to the Department of Defense through the Medical Supply Chain MD Surg FSF, with the primary place of performance located in Pensacola, Florida, at ZIP code 32512-0003. The NAICS code 541512 indicates the nature of the work as computer systems design and related services, emphasizing the technical and compliance-focused nature of the task. Proposals must be submitted by the deadline of July 20, 2026, and while no specific set-aside type or point of contact is detailed, interested parties are directed to the official DIBBS portal for submission and further information. Compliance with these requirements is critical to supporting defense-related operations and maintaining the integrity of sensitive data.