Cybersecurity Compliance for Covered Defense Information

This contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information within contractor systems, ensuring compliance with Department of Defense cybersecurity standards. The work is scoped under a subcontract with a primary focus on safeguarding sensitive data handled in connection with medical supply chain operations, specifically at Fort Bliss, Texas, with the applicable NAICS code 541512 indicating information technology services. All cybersecurity measures must align with the requirements of NIST SP 800-171, covering areas such as access control, audit and accountability, configuration management, incident response, and system and communications protection. The solicitation opened on July 29, 2026, with responses due by August 5, 2026, and is managed by the Department of Defense under the Medical Supply Chain FSH designation. Performance is mandated at the Fort Bliss location with a zip code of 79918-2527, and the contractor must be prepared to demonstrate full adherence to the NIST framework through documentation, assessments, and continuous monitoring. There is no set-aside designation specified, and the contract is exclusively a subcontract, meaning the winning party will be working under a prime contractor. Compliance is non-negotiable and failure to meet the controls will result in contract violation.