Cybersecurity Compliance for Contractor Systems (NIST SP 800-171)

The contract requires the implementation and documentation of cybersecurity controls outlined in NIST Special Publication 800-171 to protect federal information processed, stored, or transmitted on contractor systems. This subcontract is part of a broader initiative by the Department of Defense’s Medical Supply Chain MD Surg FSF to ensure compliance with federal cybersecurity standards across its supply chain, specifically targeting systems associated with the Fort Bliss location with a zip code of 79918-0000. The work involves assessing current security postures, applying the required controls, and generating comprehensive documentation to demonstrate adherence to the NIST framework, which includes covering areas such as access control, audit, configuration management, and incident response. The solicitation is open for responses until August 3, 2026, with a posted date of July 26, 2026, and is classified under the NAICS code 541512 for computer systems design services. There is no set-aside designation specified, and the contract will be managed as a subcontract within the Defense Logistics Agency’s DIBBS system. Performance must adhere strictly to the NIST 800-171 requirements, and successful compliance is essential for maintaining eligibility to handle controlled unclassified information within the Defense Supply Chain. Contractors must be prepared to undergo audits and provide verifiable evidence of implementation across all applicable control families without exception.