Cybersecurity Compliance for CUI Handling (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls across systems that process, store, or transmit Controlled Unclassified Information (CUI). This includes conducting comprehensive assessments to verify compliance with all required security controls, as well as preparing and submitting detailed documentation that demonstrates adherence to the standard. The work is critical to ensuring the protection of sensitive government data and must be performed in accordance with federal cybersecurity requirements. The contract is classified as a subcontract under NAICS code 541512 and is sponsored by the Department of Defense through the Medical Supply Chain FSH organization. Performance is scheduled to occur in Suffolk, Virginia, with a response deadline of August 4, 2026. The solicitation was posted on July 28, 2026, and all proposals must be submitted by the specified deadline to be considered. While no set-aside designation is provided, the effort is tied directly to Defense Department operations and demands strict adherence to NIST guidelines for CUI protection.