Cybersecurity Compliance for Controlled Unclassified Information (CUI)

The contract requires implementation and maintenance of cybersecurity safeguards in accordance with NIST SP 800-171 for all systems that handle Controlled Unclassified Information. This includes establishing technical, administrative, and physical controls to protect the confidentiality, integrity, and availability of CUI, ensuring full compliance with federal standards for information security. The contractor must also adhere to the cyber incident reporting requirements outlined in DFARS 252.204-7012, necessitating prompt detection, documentation, and reporting of any security incidents affecting covered systems to the appropriate government authorities within established timeframes. This is a subcontract under the Department of Defense, specifically tied to the Medical Supply Chain MD Surg FSF, with performance expected at the APO location with ZIP code 09227-0000. The solicitation was posted on May 12, 2026, and responses are due by May 18, 2026. The NAICS code 541512 indicates that the work falls under Computer Systems Design Services, suggesting the contractor is expected to provide technical expertise in securing information systems. The contract does not specify any set-aside provisions, and all compliance obligations must be met without exception to fulfill contractual requirements.