Cybersecurity Compliance for Controlled Unclassified Information (CUI)

The contract focuses on implementing and documenting NIST SP 800-171 cybersecurity controls for systems that handle Controlled Unclassified Information (CUI). It requires ensuring compliance with federal standards, particularly in preparation for Department of Defense assessments and audits. The work includes readiness activities to support audit processes and verification by the DoD, ensuring that all necessary controls are in place and properly documented. This subcontract, titled "Cybersecurity Compliance for Controlled Unclassified Information (CUI)," pertains to the NAICS code 541512, indicating a focus on computer systems design services. The contract is issued by the Department of Defense through the Medical Supply Chain FSH office, with performance located at the FPO 96691-1500 address. The solicitation was posted on May 14, 2026, with responses due by May 21, 2026, reflecting a short turnaround for interested vendors to submit proposals. The primary goal is to assist the DoD in maintaining secure systems that protect sensitive but unclassified information throughout its supply chain operations.