Cybersecurity Compliance for Covered Defense Information

The contract requires implementation of NIST SP 800-171 security controls to protect covered defense information on systems managed by the subcontractor, with a mandatory submission of a Department of Defense assessment to demonstrate compliance. This effort is tied to systems handling sensitive defense data and must align with federal cybersecurity standards to ensure the confidentiality, integrity, and availability of information. The work is scoped under a subcontract and must be completed in support of the Department of Defense, specifically the Medical Supply Chain MD Surg FSF, with performance to occur at Yorktown, Virginia, 23691-5100. Responses are due by August 10, 2026, and the solicitation is cataloged under NAICS code 541512, indicating it relates to custom computer programming services. The contract does not specify a set-aside classification and lacks a designated point of contact, but the official solicitation can be accessed through the DIBBS portal using the provided link. All involved parties must adhere strictly to the NIST framework and documentation requirements to meet DOD compliance expectations prior to the stated deadline.