Cybersecurity Compliance for CUI (NIST SP 800-171)

The contract requires the implementation and documentation of cybersecurity controls to safeguard Controlled Unclassified Information in accordance with NIST Special Publication 800-171 and the Defense Federal Acquisition Regulation Supplement clause 252.204-7012. This subcontract underscores a critical obligation to ensure that all cybersecurity measures align precisely with federal standards designed to protect sensitive but unclassified data handled by defense contractors. The work must be executed and documented to demonstrate full compliance, covering administrative, technical, and physical safeguards across all systems and processes that store, process, or transmit CUI. The solicitation is issued under NAICS code 541512 for Computer Systems Design Services and is managed by the Department of Defense through the Medical Supply Chain Pharm FSA. Performance is expected at a military postal address with ZIP 09570, indicating operations may occur in a deployed or overseas location. The response deadline is July 22, 2026, and the contract is open under a subcontract framework without a specified set-aside designation. The offering is accessible via the DIBBS platform, suggesting participation is open to qualified subcontractors who can demonstrate proven capability in implementing and sustaining NIST 800-171 compliance within a Department of Defense context.