Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation and documentation of cybersecurity safeguards to comply with DFARS 252.204-7012 and NIST SP 800-171 for any systems handling covered defense information. This subcontract is focused on ensuring that all technical, administrative, and physical controls mandated by these standards are fully integrated and operational to protect sensitive data. The contractor must demonstrate adherence to the 110 security controls outlined in NIST SP 800-171, including access control, audit and accountability, configuration management, and incident response, and provide detailed documentation evidencing compliance for review by the Department of Defense. Performance of this contract is designated to take place at Fort Bliss, Texas, with the work associated with the Medical Supply Chain MD Surg FSF division under the Department of Defense. The solicitation is classified as a subcontract with a NAICS code of 541512, indicating the nature of the work involves computer systems design and related services. The opportunity was posted on July 30, 2026, and responses are due by August 5, 2026. Successful bidders will be expected to deliver not only technical implementation but also a comprehensive compliance package that includes policies, procedures, and evidence of control execution to satisfy Defense Contracting requirements.