Cybersecurity Compliance for Controlled Unclassified Information (CUI)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information (CUI) within non-federal systems, ensuring alignment with federal cybersecurity standards. It mandates strict adherence to DFARS requirements for reporting cyber incidents, including timely notification and documentation of any breaches or anomalies affecting CUI. The work is classified as a subcontract under NAICS code 541512, indicating it involves information technology services, and is tied to the Department of Defense through the Medical Supply Chain FSH entity, with performance expected to occur at the FPO location with ZIP code 96632. The response deadline is set for July 23, 2026, and the solicitation is accessible via a DIBBS portal link, with no set-aside provisions specified, meaning all eligible contractors may compete.