Cybersecurity Compliance for CUI Protection

The contract requires the implementation and full documentation of security controls outlined in NIST SP 800-171 Rev. 1 to safeguard Controlled Unclassified Information within non-federal systems. The work must ensure compliance with all applicable requirements to protect CUI against unauthorized access, disclosure, or compromise, with detailed evidence of control implementation accepted as part of deliverables. This subcontract is positioned under the NAICS code 541611 for management, scientific, and technical consulting services, indicating a focus on advisory and technical execution rather than product supply. Performance is expected to be carried out in conjunction with the Department of Defense, specifically under the Medical Supply Chain MD Surg FSF, with the designated place of performance listed as FPO with zip code 96667. The solicitation was posted on May 10, 2026, and responses are due by May 18, 2026. While no set-aside designation is specified, the nature of the work demands specialized cybersecurity expertise aligned with federal standards, and compliance with NIST controls must be fully demonstrated through documented policies, procedures, and technical implementations.