Cybersecurity Compliance for Controlled Unclassified Information (CUI)

The contract involves implementing and maintaining cybersecurity measures in accordance with NIST SP 800-171 to protect systems that handle Controlled Unclassified Information (CUI). It mandates compliance with the Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012, which includes specific requirements for safeguarding covered defense information and reporting cyber incidents to the Department of Defense. The work is structured as a subcontract focused on ensuring adherence to these federal cybersecurity standards within the Medical Supply Chain FSH under the Department of Defense. The solicitation was posted on May 18, 2026, with a response deadline of May 26, 2026. The place of performance is at JBSA FT SAM HOUSTON, zip code 78234, and the contract falls under NAICS code 541512, which pertains to computer systems design services. This contract plays a critical role in protecting sensitive defense information by enforcing robust cybersecurity controls and timely incident reporting, thereby supporting the Department of Defense’s mission to safeguard its information infrastructure.