Cybersecurity Compliance for CUI Handling

This contract requires the implementation and assessment of NIST SP 800-171 controls to safeguard Controlled Unclassified Information across all systems involved in supporting the agreement, including those operated by subcontractors. The focus is on ensuring robust cybersecurity measures are in place to protect CUI throughout the entire project lifecycle, with compliance verified through formal assessment processes. All parties must adhere to the NIST framework to meet federal requirements for handling sensitive but unclassified data. The contract is classified as a subcontract under NAICS code 541512 and is issued by the Department of Defense through the Medical Supply Chain Pharm FSA, with performance centered at FPO, 09523. Responses are due by May 4, 2026, following a posting date of April 27, 2026. Participation is open without a specific set-aside classification, and all contractors and subcontractors must demonstrate readiness to meet the cybersecurity obligations outlined in NIST SP 800-171 prior to award and maintain compliance throughout contract execution.