Cybersecurity Compliance for Controlled Information (NIST SP 800-171)

The contract requires the implementation and assessment of NIST SP 800-171 security controls for systems that handle Controlled Unclassified Information (CUI) in alignment with DFARS requirements. This subcontract is focused on ensuring robust cybersecurity measures are in place to protect sensitive defense-related data, with full compliance expected across all designated systems. The performance location is tied to Fort Bliss, Texas, with the work falling under NAICS code 541512 for Computer Systems Design Services, indicating that the effort involves technical design, integration, and evaluation of cybersecurity infrastructure. The solicitation was posted on July 23, 2026, with a strict response deadline of July 30, 2026, signaling a time-sensitive procurement process. The contracting activity is under the Department of Defense, specifically the Medical Supply Chain FSH office, which underscores the critical nature of securing medical logistics data within the defense supply chain. The successful offeror must demonstrate proven experience with NIST SP 800-171 controls, conduct comprehensive assessments to validate compliance, and provide documentation sufficient to meet federal audit and regulatory standards. All work must adhere to the strict timelines and performance expectations outlined in the subcontract structure.