Cybersecurity Compliance for Covered Defense Information

This contract requires the implementation of NIST SP 800-171 security controls to safeguard covered defense information handled by systems involved in medical supply chain operations for the Department of Defense. The work must ensure compliance with all prescribed cybersecurity requirements to protect sensitive data, including the timely reporting of any cyber incidents as mandated by federal regulations. Contractors are also responsible for accurate and secure submission of data through the Wide Area WorkFlow system, which is critical for maintaining visibility and accountability in the supply chain. The performance location is specifically tied to Fort Campbell, with all activities centered around securing information systems used in support of surgical and medical logistics functions under the Medical Supply Chain MD Surg FSF. The contract is issued as a subcontract under NAICS code 541512, indicating it involves computer systems design and related services focused on cybersecurity implementation. The solicitation was posted on July 14, 2026, with proposals due by July 20, 2026, establishing a tight submission window for qualified entities to demonstrate their ability to meet strict compliance standards. All work must align with Department of Defense cybersecurity expectations, and failure to implement NIST controls or report incidents promptly may result in contract breach or loss of eligibility for future opportunities. The place of performance and the nature of the information handled underscore the mission-critical nature of the cybersecurity efforts required.