Cybersecurity Compliance for Controlled Unclassified Information (CUI)

The contract requires full implementation and self-assessment of NIST SP 800-171 controls to protect covered defense information and ensure compliance with DFARS cybersecurity standards. The work involves aligning systems and processes with the specified security requirements to safeguard controlled unclassified information, with a focus on achieving and documenting full compliance through a formal self-assessment process. This effort is critical for maintaining eligibility to handle sensitive data within the Department of Defense supply chain. Performed under a subcontract with a place of performance in Groton, Connecticut, the task falls under NAICS code 541512 for computer systems design services and is targeted at organizations capable of executing robust cybersecurity measures. The solicitation was posted on July 19, 2026, with a response deadline of July 27, 2026, indicating a tightly managed procurement window. The contracting activity is linked to the Medical Supply Chain Pharmaceutical FSA under the Department of Defense, emphasizing the mission-critical nature of securing health-related defense data. All participants must demonstrate technical capability to meet NIST controls and provide verifiable evidence of compliance prior to award.