Cybersecurity Compliance for Contractor Systems (NIST SP 800-171)

The contract requires the implementation and assessment of NIST Special Publication 800-171 cybersecurity controls across contractor systems that handle Controlled Unclassified Information, in full alignment with Defense Federal Acquisition Regulation Supplement requirements. All work must be performed at Fort Bragg, North Carolina, 28310, and the contractor is expected to demonstrate compliance through documented procedures, system configurations, and validated assessments that meet the stringent security standards for protecting CUI within the Department of Defense supply chain. The effort falls under NAICS code 541512, indicating it targets computer systems design services, and is structured as a subcontract within the broader medical supply chain framework managed by the Department of Defense. Proposals must be submitted by July 29, 2026, with no set-aside provisions specified, meaning the opportunity is open to all qualified entities regardless of business size or status. The contracting activity is issued under the DLA Defense Logistics Agency’s procurement system, and while no point of contact is listed, all communications and submissions must follow the designated DIBBS portal link. Failure to implement all required NIST 800-171 controls or to provide verifiable evidence of compliance will result in non-conformance and potential contract termination, as adherence is mandatory for continued involvement in DoD contract work involving sensitive unclassified data.