Cybersecurity Compliance for Covered Defense Information

This contract requires the implementation of cybersecurity controls in accordance with NIST SP 800-171 standards to safeguard covered contractor information. The contractor must ensure the protection of sensitive defense-related information and is obligated to report any cyber incidents within 72 hours of discovery. The focus is on compliance with stringent government cybersecurity requirements to maintain the integrity and confidentiality of defense data. Issued by the Department of Defense under the Medical Supply Chain MD SURG FSF, the subcontract opportunity falls under NAICS code 541512, indicating a requirement for computer systems design services. The place of performance is in Rochester, zip code 14624-5136, and responses to the solicitation are due by May 26, 2026. The contract aims to enhance cybersecurity measures within the defense supply chain by holding contractors accountable for implementing and maintaining required controls and timely incident reporting.