Cybersecurity Compliance for CUI Handling

The contract requires implementation and maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information within the medical supply chain, ensuring compliance with federal cybersecurity standards for handling sensitive but unclassified data. The work involves configuring, monitoring, and sustaining technical and administrative safeguards across systems and processes that support medical logistics under the Department of Defense, with performance obligations tied to a designated military postal address in APO, ZIP 09227-0000. All activities must align strictly with NIST guidelines to mitigate risks associated with unauthorized access, disclosure, or loss of CUI throughout the supply chain's digital and physical environments. This is a subcontract solicitation under NAICS code 541512, indicating the work falls under computer systems design and related services, with a deadline for responses set for July 22, 2026. The contracting entity is the Medical Supply Chain MD Surg FSF, operating under the broader authority of the Department of Defense, though no specific set-aside designation or point of contact is provided. The online solicitation portal is accessible via DIBBS, requiring potential bidders to navigate the official platform for full details, submission protocols, and any supporting documentation required for eligibility and compliance. The scope demands proven expertise in NIST 800-171 frameworks and experience securing sensitive data in defense-related medical supply operations.