Cybersecurity Compliance for Controlled Unclassified Information (CUI)

The contract focuses on providing cybersecurity compliance services to support the Department of Defense’s Medical Supply Chain operations at Perry Point, specifically for systems managing Controlled Unclassified Information (CUI). The primary responsibilities include conducting assessments in line with NIST SP 800-171 standards, developing Plans of Actions and Milestones (POA&M), and submitting the required data to the Supplier Performance Risk System (SPRS). This support aims to ensure that systems handling sensitive but unclassified information meet stringent cybersecurity requirements. Issued as a subcontract opportunity and categorized under NAICS code 541512, the contract was posted on May 10, 2026, with proposals due by May 18, 2026. The work is situated at the designated location in Perry Point, Maryland, and is associated with a Department of Defense office focused on medical supply chain and surgical support. While some details such as solicitation number, agency contact information, and specific set-aside status are not provided, this contract offers a critical role in maintaining cybersecurity compliance for DoD systems handling CUI.